-
Bug
-
Resolution: Done-Errata
-
Major
-
None
Description of problem:
The usage of the katello-ca-consumer rpm has been deprecated and even removed from the Global registration workflow but when it comes to installing or renewing SSL certs of the external capsule, we will need to use the "capsule-certs-generate" command and it will suggest the installation of katello-ca-consumer rpm as well.
Version-Release number of selected component (if applicable):
Satellite 6.12 [ and all other versions ]
How reproducible:
Always
Steps to Reproduce:
1. Install a Satellite with Custom certs.
2. Proceed preparing certs and cert tar bundle for external capsule installation
Actual results:
The katello-certs-check suggests using "capsule-certs-generate" and capsule-certs-generate suggests doing this:
###########
Preparing installation Done
Success!
To finish the installation, follow these steps:
If you do not have the Capsule registered to the Satellite instance, then please do the following:
1. yum -y localinstall http://<sat fqdn>/pub/katello-ca-consumer-latest.noarch.rpm
2. subscription-manager register --org "RedHat"
#############
In the case of an existing capsule, we don't even need to do step 2 but step 1 is good enough to update the CA for Capsules RHSM.
Expected results:
Provide an alternate option of :
~~
yum -y localinstall http://<sat fqdn>/pub/katello-ca-consumer-latest.noarch.rpm
~~
when doing SSL cert installation or Update for an external capsule
Additional info:
NA
- clones
-
SAT-19781 As usage of katello-ca-consumer rpm has been deprecated, the capsule-certs-generate command should suggest alternate approach during SSL cert installation\renewal
-
- Closed
-
- depends on
-
SAT-30766 Reference global registration in certs-generate output by ehelms · Pull Request #1006 · theforeman/foreman-installer · GitHub
-
- Closed
-
- links to
-
RHBA-2025:148522 Satellite 6.16.5 Async Update