Uploaded image for project: 'Ansible Automation Platform RFEs'
  1. Ansible Automation Platform RFEs
  2. AAPRFE-1557

[RFE-Installer] Platform installer should append CA public cert into /etc/tower/tower.cert

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      Currently, installer does not append CA public cert into /etc/tower/tower.cert which is referred by some applications for the configuration or validation.

      Customer justification:
      Justification for the requirement is that ServiceNow Integration Spoke to Ansible Automation Platform Controller requires the entire certificate chain (not just the leaf, the issuer and root need to be included as well) in the certificate served to validate it as part of the integration.
       

      Expectations:

      Installer should refer to the 'custom_ca_cert=/path/to/ca.crt' and append that cert to '/etc/tower/tower.cert'

       

      Workaround:
      #cp /etc/tower/tower.cert /etc/tower/tower.cert.bkp
      #cat /etc/pki/ca-trust/source/anchors/ansible-automation-platform-custom-ca-cert.crt >> /etc/tower/tower.cert
      (OR use the CA public path from the inventory)
      #automation-controller-service restart
       

              rhn-sa-pgriffiths Phil Griffiths
              rhn-support-ahuchcha Amar Huchchanavar
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: