mgr-package-rpm-certificate-osimage

1 Version 1.0.0

`mgr-package-rpm-certificate-osimage`

Generate RPM package containing the CA certificate for the server

            mgr-package-rpm-certificate-osimage
            options ...
            --help

            mgr-ssl-tool --ca-cert-full-pathCA_CERT_FULL_PATH
            options ...

## Help

- `mgr-package-rpm-certificate-osimage --help`
- `mgr-package-rpm-certificate-osimage --ca-cert-full-path`

## Description

The `mgr-package-rpm-certificate-osimage`) is used to generate the RPM package containing the SUSE Manager's CA certificate.

This RPM is used in OS image build process to trust SUSE Manager when accessing its channels. The RPM is the same as the one created by mgr-ssl-tool with the only difference that the RPM generated by `mgr-package-rpm-certificate-osimage` is depending on `ca-certificates` to make Kiwi into installing the whole trust chain.

SUSE Manager Servers use /root/ssl-build as the default build directory.

Normally, on new installations, `mgr-package-rpm-certificate-osimage` is automatically called upon installation. For upgrades, system administrator should call `mgr-package-rpm-certificate-osimage` . If the command is called without parameters, it tries to package the certificate found in the default directory /root/ssl-build. If the generated CA certificate is in another directory, the full path of the certificate must be specified by using --ca-cert-full-path CA_CERT_FULL_PATH

The generated RPM will be placed in: /usr/share/susemanager/salt/images. If a RPM is already present in the target location, it will be overwritten.

## See Also

- mgr-ssl-tool
- openssl(1)
- rpm(8)

## Author

- Michele Bolognamichele.bologna@suse.com