Installation guide

This RPM file contains the server. key, server. csr, and server. crt files. These files are

installed in the following directories:

/etc/httpd /co nf/ssl . key/server. key

/etc/httpd /co nf/ssl . csr/server. csr

/etc/httpd /co nf/ssl . crt/server. crt

rhn-server-o penssl . cnf: the Web server's SSL configuration file.

l atest. txt: lists the latest versions of the relevant files.

When this process is complete, distribute and install the RPM file on its respective Satellite or Proxy

Server, and then restart the httpd service.

# servi ce httpd restart

3.3. Deploying t he CA SSL Public Cert ificat e t o Client s

The Red Hat Satellite Proxy Server and Red Hat Satellite Server installation processes generate a CA

SSL public certificate and package it in an RPM file. These installation processes make the certificate

and RPM file publicly available by placing a copy of one or both into the /var/www/html /pub/

directory of the Satellite or Proxy Server.

You can use your web browser to inspect the contents of this directory: http://proxy-or-

sat.example.com/pub/. You can use the wg et or curl commands to download the CA SSL public

certificate to a client system.

Important

Confirm the name of the certificate or RPM file before running any of these commands.

# curl -O http: //pro xy-o r-sat. exampl e. co m/pub/R HN-O R G -T R UST ED -SSL-C ER T

# wg et http: //pro xy-o r-sat. exampl e. co m/pub/R HN-O R G -T R UST ED -SSL-C ER T

Alternatively, if the CA SSL public certificate RPM file exists in the /pub directory, you can use the rpm

command to install the package. For example:

# rpm -Uvh http: //pro xy-o r-sat. exampl e. co m/pub/rhn-o rg -trusted -ssl -

cert-VER-REL. no arch. rpm

3.4. Configuring Client Syst ems t o Use Cert ificat es

After you have deployed the RPM file or the certificate to a client system, you need to edit the

configuration files of the Red Hat Up d at e Ag ent and the Red Hat Satellit e Regist rat io n

Clien t (if necessary) to use the new CA SSL public certificate file. You also need to update the

configuration so that it connects to the appropriate Red Hat Proxy Server or Red Hat Satellite Server.

The generally accepted location for that CA SSL public certificate is in the /usr/share/rhn

directory.

Red Hat Sat ellit e 5.7 Client Configurat ion G u ide