Unable to connect smart proxy to master (SSL errors)

Support
#1

Problem:
foreman-installer fails on smart proxy with ssl connect errors.
Expected outcome:
connects properly, like the others have done
Foreman and Proxy versions:
3.6 / 4.8 running OS: running EL8
Foreman and Proxy plugin versions:
same

running below command (remvoed hostnames) and keep getting error below.

foreman-installer --scenario foreman-proxy-content --certs-tar-file “/root/smart-proxy-certs.tar” --foreman-proxy-register-in-foreman “true” --foreman-proxy-foreman-base-url “https://masterdotcom” --foreman-proxy-trusted-hosts “masterdotcom” --foreman-proxy-trusted-hosts “smart-proxydotcom” --foreman-proxy-oauth-consumer-key “key” --foreman-proxy-oauth-consumer-secret “secret”

it configures through all steps then finally says:

[ERROR ] [configure] Error making POST request to Foreman at https://masterdotcom/api/v2/smart_proxies: Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([RestClient::SSLCertificateNotVerified]: SSL_connect returned=1 errno=0 state=error: certificate verify failed (self signed certificate in certificate chain)) for proxy https://proxydotcom:9090/v2/features Please check the proxy is configured and running on the host.

2023-06-13 13:52:17 [ERROR ] [configure] /Stage[main]/Foreman_proxy::Register/Foreman_smartproxy[proxydotcom]/ensure: change from ‘absent’ to ‘present’ failed: Error making POST request to Foreman at https://masterdotcom/api/v2/smart_proxies: Unable to communicate with the proxy: ERF12-2530 [ProxyAPI::ProxyException]: Unable to detect features ([RestClient::SSLCertificateNotVerified]: SSL_connect returned=1 errno=0 state=error: certificate verify failed (self signed certificate in certificate chain)) for proxy https://proxydotcom:9090/v2/features
Please check the proxy is configured and running on the host.

netstat shows it’s running and listening. Same command but tweaed for the other 2 proxies worked fine

Any ideas?

thanks

#2

dns is pointing correctly in /etc/hosts and our other entry

#3

worth mentionig that I had to change the timezone of the proxy to utc AFTER the initial fail. Didnt realise it wasnt already during setup.
I know that SSL can be very picky when times do not match, so thought best to bring up. All servers are now correct and utc timezone

#4

OK, think I’ve fixed it by running the below…

removed the proxy fqdn folder in ssl-build on the master, also delete the proxy tar file.
Re-run the foreman-proxy-certs-generate on the master for this proxy to create new tar folder again

Re-run the foreman-installer command on the proxy that is given to you from the master.
Seems to be happy. Time will tell