Thanks. I tried this.
# openssl dgst -sha256 redhat-uep.pem
SHA256(redhat-uep.pem)= 
39e65fabe7560d366be3bc4d133bcdef13e30d41ac552a05d182e2f66395422d

It doesn't match the ca_cert in pulp. Just wondering how exactly pulp GET the 
Sha256 sum.

From: [email protected] At: 01/07/20 16:23:34To:  Bin Li (BLOOMBERG/ 120 PARK 
) 
Cc:  [email protected]
Subject: Re: [Pulp-list] pulp3 remote ca_cert

The values returned are SHA256 checksums of the strings you initially 
submitted. This is documented in the Response section here[0].

[0] https://docs.pulpproject.org/restapi.html#operation/remotes_file_file_read
On Tue, Jan 7, 2020 at 1:49 PM Bin Li (BLOOMBERG/ 120 PARK) 
<[email protected]> wrote:

Happy new year.

I want to compare the cert configured in pulp with our current valid 
entitlement cert. If they are different, the cert in pulp will be updated. The 
question is if it is possible to compare since they always look different?

When I list a remote, the certs are showed like below{
            "ca_cert": 
"b8bd944ff40f1756c08743800453b724f133029725dc762ed9ce6504a828a5ec", 
            "client_cert": 
"d24baa45b4b554e782dd134e6c5f1eb1f88e1d88122d3d417b05f7f8153954a1", 
            "client_key": 
"55ece66e807b5c979f425e55f90958b8fbc769320a0bdb5f4c3563464e8c9530", 
...
}

This is different than the cert when I created the remote:
('-----BEGIN CERTIFICATE-----\n'
 'MIIG/TCCBOWgAwIBAgIBNzANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMCVVMx\n'
 'FzAVBgNVBAgMDk5vcnRoIENhcm9saW5hMRYwFAYDVQQKDA1SZWQgSGF0LCBJbmMu\n'
 'MRgwFgYDVQQLDA9SZWQgSGF0IE5ldHdvcmsxMTAvBgNVBAMMKFJlZCBIYXQgRW50\n'
 'aXRsZW1lbnQgT3BlcmF0aW9ucyBBdXRob3JpdHkxJDAiBgkqhkiG9w0BCQEWFWNh\n'
 'LXN1cHBvcnRAcmVkaGF0LmNvbTAeFw0xMDEwMDQxMzI3NDhaFw0zMDA5MjkxMzI3\n'
 'NDhaMIGuMQswCQYDV...


_______________________________________________
Pulp-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pulp-list


_______________________________________________
Pulp-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/pulp-list

Reply via email to