Change Foreman web SSL certificate

[ekohl]

Have a look at

Replacing self-signed certificates

Yes, I’ve been meaning to write a blog about this. I’ll leave placing the certificates in the right place as a users exercise (I used LetsEncrypt). You want to change the CA that’s used to verify as well. I was lazy and used the system CA bundle. You gain additional security against another CA issuing a cert by using the the exact certificate but IMHO that’s a very small chance and not a relevant attack vector for my personal infra. --foreman-server-ssl-cert /etc/letsencrypt/live/$HOSTNAME/cert…