Unable to install the capsule on a fresh machine.
I encountered an error while installing a capsule on a clean box with
Katello 3.1: SSLCertificateChainFile: file
'/var/lib/puppet/ssl/ca/ca_crt.pem' does not exist or is empty.
.
[ WARN 2016-09-09 15:39:43 verbose]
/Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[capsule.acme.com]/ensure:
created
[ WARN 2016-09-09 15:39:43 verbose]
/Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[capsule.acme.com]:
Triggered 'refresh' from 1 events
[ INFO 2016-09-09 15:39:43 verbose] Class[Apache::Service]: Scheduling
refresh of Service[httpd]
[ERROR 2016-09-09 15:39:44 verbose] Could not start Service[httpd]:
Execution of
'/usr/share/katello-installer-base/modules/service_wait/bin/service-wait
start httpd' returned 1: Redirecting to /bin/systemctl start httpd.servic
e
[ INFO 2016-09-09 15:39:44 verbose] Job for httpd.service failed because
the control process exited with error code. See "systemctl status
httpd.service" and "journalctl -xe" for details.
Checking httpd -t…
[root@capsule ca]# httpd -t
AH00526: Syntax error on line 36 of /etc/httpd/conf.d/25-puppet.conf:
SSLCertificateChainFile: file '/var/lib/puppet/ssl/ca/ca_crt.pem' does not
exist or is empty
I ended up having to make a hardlink of the file to address this issue.
cd /var/lib/puppet/ssl
mkdir ca
ln …/certs/ca.pem ca_crt.pem
Next attempt revealed another similar issue.
SSLCARevocationFile: file '/var/lib/puppet/ssl/ca/ca_crl.pem' does not
exist or is empty
Similar fix
cd /var/lib/puppet/ssl
ln …/crl.pem ca_crl.pem
Not sure why this isn't working, but it appeared to address the problem.