AutoYast with HTTPS

Hi all,

since using SMT on SLES 12 AutoYast does not work with HTTPS anymore

After booting up the kernel and first connecting to the AutoYast XML file =
there comes up an error 60: SSL certificate problem: self signed certificat=
e in chain

But there is an official wildcard certificate on my SMT Server, and a curl =
-v check shows, that is running great:

VSZ-10:/etc/apache2/vhosts.d # curl https://smt.campuslan.de/ -v
* Hostname was NOT found in DNS cache
*   Trying 148.251.229.82...
* Connected to smt.campuslan.de (148.251.229.82) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs/
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, Certificate (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* Server certificate:
*	    subject: OU=3DDomain Control Validated; CN=3D*.campuslan.de
*	    start date: 2019-03-28 18:04:04 GMT
*	    expire date: 2021-05-10 18:07:48 GMT
*	    subjectAltName: smt.campuslan.de matched
*	    issuer: C=3DBE; O=3DGlobalSign nv-sa; CN=3DAlphaSSL CA - =
SHA256 - G2
*	    SSL certificate verify ok.
> GET / HTTP/1.1
> User-Agent: curl/7.37.0
> Host: smt.campuslan.de
> Accept: */*

Setting up everything to HTTP works.

With Apache 2.2 on SLES11 this worked fine.
Do I have to integrate my certificate path to inst_server.conf or smth?

Thanks for your help
Tobias


-- 
To unsubscribe, e-mail: [email protected]
To contact the owner, e-mail: [email protected]