第3章 Authenticating API Calls

Procedure

1. Obtain a certificate from the Satellite Server with which you want to communicate using one of the following options:

   • If you execute the command from a remote server, obtain a certificate using SSH:

     $ scp root@satellite.example.com:/var/www/html/pub/katello-server-ca.crt ./

     Copy to Clipboard Toggle word wrap

   • If you execute the command directly on the Satellite Server, copy the certificate to the current directory:

     $ cp /var/www/html/pub/katello-server-ca.crt ./

     Copy to Clipboard Toggle word wrap

2. Use the API request with the --cacert katello-server-ca.crt option to verify the identity of the Satellite Server:

   $ curl --request GET \
   --user sat_username:sat_password \
   --header "Accept:application/json" \
   --cacert katello-server-ca.crt \
   https://satellite.example.com/katello/api/organizations \
   | python -m json.tool

   Copy to Clipboard Toggle word wrap

3. Create a Network Security Services (NSS) database to store the katello-server-ca.crt certificate:

   $ certutil -N -d sql:$HOME/.pki/nssdb

   Copy to Clipboard Toggle word wrap

4. Permanently include the certificate in the NSS database:

   $ certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "Red Hat Satellite" \
   -i katello-server-ca.crt

   Copy to Clipboard Toggle word wrap

5. Verify that the certificate is present in the NSS database by entering the API request without the --cacert option:

   $ curl --request GET \
   --user sat_username:sat_password \
   https://satellite.example.com/api/v2/hosts

   Copy to Clipboard Toggle word wrap