Update documentation for deploying smart proxy with default SSL certificates

[rook-swissas]

URL of the document

https://docs.theforeman.org/3.17/Installing_Proxy/index-katello.html#configuring-capsule-default-certificate_smart-proxy

Text I'm reading

On Smart Proxy server, to deploy the certificate, enter the foreman-installer command that the foreman-proxy-certs-generate command returns.

Example

foreman-installer --scenario foreman-proxy-content \
--certs-tar-file "/root/smart-proxy_cert/smartproxy.example.com-certs.tar" \
--foreman-proxy-foreman-base-url "https://foreman.example.com" \
--foreman-proxy-trusted-hosts "foreman.example.com" \
--foreman-proxy-trusted-hosts "smartproxy.example.com" \
--foreman-proxy-oauth-consumer-key "s97QxvUAgFNAQZNGg4F9zLq2biDsxM7f" \
--foreman-proxy-oauth-consumer-secret "6bpzAdMpRAfYaVZtaepYetomgBVQ6ehY"

Describe the issue

In my case, when running the foreman-installer command provided earlier by the foreman-proxy-certs-generate command, I was getting the following error:

SSL_connect returned=1 errno=0 peeraddr=172.12.345.678:443 state=error: certificate verify failed (self-signed certificate in certificate chain)

Suggestion

I suggest to explicitly add the following argument to the foreman-installer command in the documentation to tell the installer where the CA certificate is located:

--foreman-proxy-foreman-ssl-ca

Example (with added CA parameter)

foreman-installer --scenario foreman-proxy-content \
--certs-tar-file "/root/smart-proxy_cert/smartproxy.example.com-certs.tar" \
--foreman-proxy-foreman-base-url "https://foreman.example.com" \
--foreman-proxy-trusted-hosts "foreman.example.com" \
--foreman-proxy-trusted-hosts "smartproxy.example.com" \
--foreman-proxy-oauth-consumer-key "s97QxvUAgFNAQZNGg4F9zLq2biDsxM7f" \
--foreman-proxy-oauth-consumer-secret "6bpzAdMpRAfYaVZtaepYetomgBVQ6ehY"
--foreman-proxy-foreman-ssl-ca  "/etc/pki/ca-trust/source/anchors/katello-server-ca.crt"