Change to own ssl certificates in suma 5.0

SUSE Manager
1

I’m trying to use own certificates in suma 5.0 but due to the sle micro setup I can’t figure out how to get it done.

At this point i managed to copy the certs to a “persistent folder” i then try to use the command

mgrctl exec – mgr-ssl-cert-setup --root-ca-file=rootca.crt --server-cert-file=server.crt --server-key-file=server.key

but get message : Root CA: file not found

edit:
these are thirdparty certificates signed by the intermediate
also tried to specify --intermediate-ca-file with chain files etc… but could not find a working combination so far …

2nd edit: copying the root cert to the trust folder also does not solve the issue
/etc/pki/trust/anchors folder

found this thread Certificate renewal fails with ERROR: No CA found for server certificate · Issue #8983 · uyuni-project/uyuni · GitHub seems to be related

2

ok couple of days later

before you do mgrctl exec … make sure the cert files are in the suma container

you can use mgrctl term to go into the container
you can use

podman cp /opt/certs/yourcertfiles/ containerid:/opt/certs/yourcertfiles

to copy the files from the sle micro host file system into the container

after doing so i get another error

KeyError: ‘authorityKeyIdentifier’

after talking to suse support this seems to be a known bug