[opensuse-autoinstall] AutoYast with HTTPS
Hi all, since using SMT on SLES 12 AutoYast does not work with HTTPS anymore After booting up the kernel and first connecting to the AutoYast XML file there comes up an error 60: SSL certificate problem: self signed certificate in chain But there is an official wildcard certificate on my SMT Server, and a curl -v check shows, that is running great: VSZ-10:/etc/apache2/vhosts.d # curl https://smt.campuslan.de/ -v * Hostname was NOT found in DNS cache * Trying 148.251.229.82... * Connected to smt.campuslan.de (148.251.229.82) port 443 (#0) * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs/ * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, Certificate (11): * SSLv3, TLS handshake, Server key exchange (12): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * Server certificate: * subject: OU=Domain Control Validated; CN=*.campuslan.de * start date: 2019-03-28 18:04:04 GMT * expire date: 2021-05-10 18:07:48 GMT * subjectAltName: smt.campuslan.de matched * issuer: C=BE; O=GlobalSign nv-sa; CN=AlphaSSL CA - SHA256 - G2 * SSL certificate verify ok.
GET / HTTP/1.1 User-Agent: curl/7.37.0 Host: smt.campuslan.de Accept: */*
Setting up everything to HTTP works. With Apache 2.2 on SLES11 this worked fine. Do I have to integrate my certificate path to inst_server.conf or smth? Thanks for your help Tobias -- To unsubscribe, e-mail: opensuse-autoinstall+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-autoinstall+owner@opensuse.org
participants (1)
-
Tobias Federl