How to check if a certificate is trusted by Red Hat Satellite?

Environment

• Red Hat Satellite

Issue

• Red Hat Satellite services use SSL certificates for internal communication, Content downloading and for integration with external services like Virtualization, SSO, 2FA and others.
• This solution aims to help to troubleshooting SSL connection errors from Satellite to the Endpoint.

Resolution

• Most of the Red Hat Satellite services are confident on the Operating System trusted Certificate Authorities, in addition tomcat relies on the Java cacert keystore. Hence in order to check the Endpoint SSL certificate next solutions must be checked:

  • How to check if a SSL/TLS certificate is trusted by Red Hat Enterprise Linux?
  • How to check if a SSL/TLS certificate is trusted by a Java-based software on Red Hat Enterprise Linux?

• In addition, next solution can perform additional checks on certificate and bundle files. This is useful to troubleshoot Satellite/Capsule custom certificates.

  • How to validate a certificate file and a Bundle file

For more KB articles/solutions related to Red Hat Satellite 6.x SSL Certificates Issues, please refer to the Consolidated Troubleshooting Article for Red Hat Satellite 6.x SSL Certificates Issues

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.