Deploying The Ca Ssl Public Certificate To Clients; Configuring Client Systems - Red Hat NETWORK 3.7 - CLIENT Configuration Manual

16
/etc/httpd/conf/ssl.csr/server.csr
•
/etc/httpd/conf/ssl.crt/server.crt
•
rhn-server-openssl.cnf — the Web server's SSL configuration file
•
— always lists the latest versions of the relevant files.
• latest.txt
Once finished, you're ready to distribute and install the RPM on its respective RHN Server. Note that
service must be restarted after installation:
httpd
/sbin/service httpd restart
3.3. Deploying the CA SSL Public Certificate to Clients
Both the RHN Proxy Server and RHN Satellite Server installation processes make client deployment
relatively easy by generating a CA SSL public certificate and RPM. These installation processes make
those publicly available by placing a copy of one or both into the
of the RHN Server.
This public directory can be inspected easily by simply browsing to it via any web browser:
http://proxy_or_sat.domain.com/pub/.
The CA SSL public certificate in that directory can be downloaded to a client system using
. For example:
curl
curl -O http://proxy_or_sat.domain.com/pub/RHN-ORG-TRUSTED-SSL-CERT
wget http://proxy_or_sat.domain.com/pub/RHN-ORG-TRUSTED-SSL-CERT
Alternatively, if the CA SSL public certificate RPM resides in the
on a client system directly:
rpm -Uvh http://proxy_or_sat.domain.com/pub/rhn-org-trusted-ssl-cert-VER-REL.noarch.rpm
Confirm the actual name of the certificate or RPM before running any of those commands.
3.4. Configuring Client Systems
Once the RPM or raw certificate has been deployed to a client system, the administrator of that system
must then alter the configuration files of the Red Hat Update Agent and the Red Hat Network
Registration Client (if necessary) to use the new CA SSL public certificate file and connect to the
appropriate RHN Proxy Server or RHN Satellite Server. The generally accepted location for that CA
SSL public certificate is in the
The RHN Proxy Server and RHN Satellite Server both have the RHN Bootstrap installed by default,
which can greatly reduce these repetitive steps and simplify the process of registering and configuring
client systems. Please refer Chapter 5 Using RHN Bootstrap for details.
directory.
/usr/share/rhn
Chapter 3. SSL Infrastructure
/var/www/html/pub/
directory, it can be installed
/pub
directory
or
wget