Using custom SSL certificate for hosts

You can use custom SSL certificate on your hosts to enable encrypted communications between orcharhino Server, orcharhino Proxy Server, and hosts. Before deploying it to your hosts, ensure that you have configured the custom SSL certificate to your orcharhino Server.

Deploying a custom SSL certificate to hosts

After you configure orcharhino to use a custom SSL certificate, you must deploy the certificate to hosts registered to orcharhino.

The katello-ca-consumer RPM package and katello-rhsm-consumer script is a deprecated feature. Deprecated functionality is still included in orcharhino and continues to be supported. However, it will be removed in a future release of this product and is not recommended for new deployments.

Use Refreshing the self-signed CA certificate on hosts instead.

For the most recent list of major functionality that has been deprecated or removed within orcharhino, refer to the Deprecated features section of the orcharhino release notes.
Procedure

  • Update the SSL certificate on each host:

    $ wget http://orcharhino.example.com/pub/katello-rhsm-consumer
$ chmod +x katello-rhsm-consumer
$ ./katello-rhsm-consumer

Resetting custom SSL certificate to default self-signed certificate on hosts

To reset the custom SSL certificate on your hosts to default self-signed certificate, you must re-register your hosts through Global Registration.

Additional resources

The text and illustrations on this page are licensed by ATIX AG under a Creative Commons Attribution Share Alike 4.0 International ("CC BY-SA 4.0") license. This page also contains text from the official Foreman documentation which uses the same license ("CC BY-SA 4.0").