Quote Originally Posted by mcalmer View Post
I think you are on the right way. The ways to configure a CA certificate on different OSes and OS versions got more and more complex over the years.
If you want to generate a new RPM with current post script call these commands:

$> rhn-ssl-tool --gen-ca --rpm-only --dir="/root/ssl-build"
$> /usr/bin/rhn-deploy-ca-cert.pl --source-dir /root/ssl-build \
    --target-dir /srv/www/htdocs/pub/ --trust-dir=/etc/pki/trust/anchors/
Thank you very much. That worked perfectly.
The first command just created the rpm with existing Certificate and nothing else - that's exactly what I wanted.