Skip to content

Instantly share code, notes, and snippets.

@dLobatog

dLobatog/ca-verification

Created February 25, 2016 11:35
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dLobatog/6e6c53bca6343ae8fc37 to your computer and use it in GitHub Desktop.
Save dLobatog/6e6c53bca6343ae8fc37 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
ca-verification
DEFAULT_CA_KEY=$(openssl rsa -noout -modulus -in /etc/pki/katello/private/katello-default-ca.key | openssl md5)
DEFAULT_SERVER_CA=$(openssl x509 -noout -modulus -in /etc/pki/katello/certs/katello-server-ca.crt | openssl md5)
DEFAULT_CA=$(openssl x509 -noout -modulus -in /etc/pki/katello/certs/katello-default-ca.crt | openssl md5)
PULP_CA_KEY=$(openssl rsa -noout -modulus -in /etc/pki/pulp/ca.key | openssl md5)
PULP_CA=$(openssl x509 -noout -modulus -in /etc/pki/pulp/ca.crt | openssl md5)
CERTS="$DEFAULT_CA_KEY $DEFAULT_SERVER_CA $DEFAULT_CA $PULP_CA $PULP_CA_KEY"
# If this prints two different moduli, your /etc/pki/pulp/ca.key is wrong and shouldn't be
# the '[security]' 'cakey' in /etc/pulp/server.conf
echo $CERTS | sed 's/(stdin)= //g' | tr ' ' '\n' | uniq
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment