proxy_container_config
Table of Contents
The following spacecmd functions are available for use with proxy container configuration
1. proxy_container_config_generate_cert
Create SUSE Manager Proxy container configuration and generate new SSL server certificate for it.
usage: proxy_container_config_generate_cert PROXY_FQDN PARENT_FQDN MAX_CACHE EMAIL
parameters:
PROXY_FQDN the fully qualified domain name of the proxy to create.
PARENT_FQDN the fully qualified domain name of the server or another proxy to connect to.
MAX_CACHE the maximum cache size in MB. 60% of the storage is a good value.
EMAIL the email of the proxy administrator
options:
-o, --output Path where to create the generated configuration. Default: 'config.zip'
-p, --ssh-port SSH port the proxy listens one. Default: 22
--ca-crt path to the certificate of the CA to use to generate a new proxy certificate.
Using /root/ssl-build/RHN-ORG-TRUSTED-SSL-CERT by default.
--ca-key path to the private key of the CA to use to generate a new proxy certificate.
Using /root/ssl-build/RHN-ORG-PRIVATE-SSL-KEY by default.
--ca-pass path to a file containing the password of the CA private key, will be prompted if not passed.
--ssl-cname alternate name of the proxy to set in the certificate. Can be provided multiple times
--ssl-country country code to set in the certificate. If omitted, default values from mgr-ssl-tool will be used.
--ssl-state state name to set in the certificate. If omitted, default values from mgr-ssl-tool will be used.
--ssl-city the city name to set in the certificate. If omitted, default values from mgr-ssl-tool will be used.
--ssl-org the organization name to set in the certificate. If omitted, default values from mgr-ssl-tool will be used.
--ssl-org-unit the organization unit name to set in the certificate. If omitted, default values from mgr-ssl-tool will be used.
--ssl-email the email to set in the certificate. If omitted, default values from mgr-ssl-tool will be used.
2. proxy_container_config
Create SUSE Manager Proxy container configuration and use already existing SSL server certificate.
usage: proxy_container_config [options] PROXY_FQDN PARENT_FQDN MAX_CACHE EMAIL ROOT_CA CRT KEY
parameters:
PROXY_FQDN the fully qualified domain name of the proxy to create.
PARENT_FQDN the fully qualified domain name of the server or another proxy to connect to.
MAX_CACHE the maximum cache size in MB. 60% of the storage is a good value.
EMAIL the email of the proxy administrator
CA path to the root CA used to sign the proxy certificate in PEM format
CRT path to the proxy certificate in PEM format
KEY path to the proxy certificate private key in PEM format
options:
-o, --output Path where to create the generated configuration. Default: 'config.zip'
-p, --ssh-port SSH port the proxy listens one. Default: 22
-i, --intermediate-ca Path to an intermediate CA used to sign the proxy
certicate in PEM format. May be provided multiple times.