403 - Forbidden Error for RHEL Repos with the Clients registered to smart proxy

[Antarctic_Guy]

It worked for me but I also had to update the CA cert in the pulpcore database.

[Errno 14] HTTPS Error 403 - Forbidden (RedHat repositories only)

I think I found the issue here - or at least an issue with using custom certificates. Katello is still using its self-signed default CA to distribute entitlement certificates. This is expected. However, pulpcore certguard has the wrong CA configured in its database - it has picked up the Server CA, which should only be used for clients to authenticate the server certificate. Updating the content of ca_certificate in pulpcore:certguard_rhsmcertguard fixes the issue and allows clients to access…

su - postgres
psql -d pulpcore
\set content `cat /etc/pki/katello/certs/katello-default-ca-stripped.crt`
update certguard_rhsmcertguard SET ca_certificate = :‘content’ ;