Vous êtes sur la page 1sur 5

8/13/2020 Accessing Red Hat Insights Through a Firewall/Proxy - Red Hat Customer Portal

(https://access.redhat.com/)

Accessing Red Hat Insights Through a Firewall/Proxy


$ SOLUTION VERIFIED - Updated May 26 2020 at 8:28 PM - English ()

Environment
Insights client is available on Red Hat Enterprise Linux (RHEL) as shown in the following table.

RHEL release Comments

RHEL 8 Distributed with Insights client pre-installed.

RHEL 7 Distributed with the Insights client RPM package loaded but not installed.

RHEL 6.10 and later You must download the Insights client RPM package and install it.

Issue
How do I configure my system to access Red Hat Insights through a firewall or proxy?
What URLs and ports do I need to configure in my proxy server to access Red Hat Insights?
How to access Red Hat Insights through firewall?
Not able to directly register system to Red Hat Insights due to below error:

Testing: https://cert-api.access.redhat.com/r/insights/uploads/
Could not successfully connect to: https://cert-api.access.redhat.com/r/insights/uploads/
[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify
failed

Resolution

Step I
Allow the following hostnames/ports on the outgoing network firewall/proxy to access Red Hat
Insights:

https://access.redhat.com/solutions/1583183 1/5
8/13/2020 Accessing Red Hat Insights Through a Firewall/Proxy - Red Hat Customer Portal

cert-api.access.redhat.com:443
(https://access.redhat.com/)
api.access.redhat.com:443

For IP based firewall: List of public IP addresses for api.access.redhat.com or


cert-api.access.redhat.com - How do I configure my firewall for api.access.redhat.com?
(https://access.redhat.com/solutions/1179133)

Step II

Applicable to the systems connected directly to the portal through RHSM.


If the system is behind an http proxy, add the details in /etc/rhsm/rhsm.conf OR
/etc/insights-client/insights-client.conf as follows:

# port for http proxy server


proxy_port =

# user name for authenticating to an http proxy, if needed


proxy_user =

# password for basic http proxy auth, if needed


proxy_password =

# host/domain suffix blacklist for proxy, if needed


no_proxy =

# Optional proxy configuration. Example: http://user:pass@192.168.100.50:8080


proxy=

Applicable to the Red Hat Satellite Clients.


No Proxy configuration is required on the client.
Configure Red Hat Satellite server with Proxy settings.

Documentation Link : Configuring Satellite Server with an HTTP Proxy


(https://access.redhat.com/documentation/en-us/red_hat_satellite/6.6/html-
single/installing_satellite_server_from_a_connected_network/index#configuring_satellite_http_proxy)

Note: Older versions of the client used /etc/redhat-access-insights/redhat-access-insights.conf


- if this is where your configuration file is, please upgrade your client).

Root Cause
Firewall or Proxy was not configured for accessing Red Hat Insights.

https://access.redhat.com/solutions/1583183 2/5
8/13/2020 Accessing Red Hat Insights Through a Firewall/Proxy - Red Hat Customer Portal

Product(s) Red Hat Insights (/taxonomy/products/redhat-insights)


(https://access.redhat.com/) Category Learn more (/category/learn-more)

Tags rhel_6 (/tags/rhel_6) rhel_7 (/taxonomy/tags/rhel7) rhel_8 (/taxonomy/tags/rhel8)

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that
Red Hat engineers have created while supporting our customers. To give you the knowledge you need the
instant it becomes available, these articles may be presented in a raw and unedited form.

People who viewed this solution also viewed

Does Red Hat Insights work on a disconnected Red Hat Satellite setup?

Solution - Aug 7, 2020

Insights client connection test fail with error 'Invalid hostname'

Solution - Oct 15, 2018

How to configure Red Hat Insights client to bypass a foreman management server

Solution - Sep 28, 2018

6 Comments
22 November 2016 6:50 AM (https://access.redhat.com/solutions/1583183#comment-1123321)
SC Sandrino Gabriel Craciun (/user/750223)
(/user/750223)
Still got
ACTIVE
CONTRIBUTOR
redhat-access-insights --test-connection Could not resolve hostname: https://cert-
234 api.access.redhat.com/r/insights/uploads
Points

https://access.redhat.com/solutions/1583183 3/5
8/13/2020 Accessing Red Hat Insights Through a Firewall/Proxy - Red Hat Customer Portal

even I have modified /etc/redhat-access-insights/redhat-access-insights.conf


(https://access.redhat.com/)

≤ Reply (/Ajax_comments/Reply/1583183/1123321)

15 November 2017 9:15 AM (https://access.redhat.com/solutions/1583183#comment-1241221)


SC Sandrino Gabriel Craciun (/user/750223)
(/user/750223)
........1 year later still no answer.......
ACTIVE
CONTRIBUTOR
≤ Reply (/Ajax_comments/Reply/1583183/1241221)
234
Points

6 September 2019 3:56 AM (https://access.redhat.com/solutions/1583183#comment-1613411)

Bryan Yount (/user/7273) RHCE (https://www.redhat.com/en/services/certification/rhce)

RHCVA (https://www.redhat.com/en/services/certification/rhcva)
(/user/7273)
RED HAT RHCSA-RHOS (https://www.redhat.com/en/services/certification/rhcsa-rhos)

GURU
Hey Sandrino, apologies that nobody replied to your comment. I have reached out to the
5778
specialist team that manages this kbase solution. In the future, if you need a quicker response,
Points
please open a support case (https://access.redhat.com/support/cases/#/case/new).

≤ Reply (/Ajax_comments/Reply/1583183/1613411)

15 November 2017 9:16 AM (https://access.redhat.com/solutions/1583183#comment-1241231)


SC Sandrino Gabriel Craciun (/user/750223)
(/user/750223)
2017-11-15 11:15:00,657 DEBUG loglevel:DEBUG 2017-11-15 11:15:00,657 DEBUG auto_config:True
ACTIVE 2017-11-15 11:15:00,658 DEBUG authmethod:CERT 2017-11-15 11:15:00,658 DEBUG
CONTRIBUTOR
obfuscate:False 2017-11-15 11:15:00,658 DEBUG no_schedule:False 2017-11-15 11:15:00,658
234
Points DEBUG NO PROXY: None 2017-11-15 11:15:00,658 DEBUG CONF Proxy: http://10.125.50.10:3128
2017-11-15 11:15:00,661 DEBUG [Errno -2] Name or service not known 2017-11-15 11:15:00,661
ERROR Could not resolve hostname: https://cert-api.acces s.redhat.com/r/insights/uploads

≤ Reply (/Ajax_comments/Reply/1583183/1241231)

13 June 2019 1:32 PM (https://access.redhat.com/solutions/1583183#comment-1545711)


SL Sigbjorn Lie (/user/18917021)
(/user/18917021)
Are these the correct DNS names? I get no answer when looking up DNS A record for cert-
NEWBIE api.cloud.redhat.com and api.cloud.redhat.com.
5 Points
≤ Reply (/Ajax_comments/Reply/1583183/1545711)

3 July 2019 1:32 AM (https://access.redhat.com/solutions/1583183#comment-1562561)

https://access.redhat.com/solutions/1583183 4/5
8/13/2020 Accessing Red Hat Insights Through a Firewall/Proxy - Red Hat Customer Portal

Daniel Dekok (/user/17324991)


(https://access.redhat.com/)
DD Other insights documentation says it should be:

(/user/17324991)
cert-api.access.redhat.com and maybe api.access.redhat.com
NEWBIE

5 Points Which both resolve correctly and respond to https. So I think it should be those and not the
cloud ones above.

≤ Reply (/Ajax_comments/Reply/1583183/1562561)

All systems operational (https://status.redhat.com)

Privacy Statement (http://www.redhat.com/en/about/privacy-


policy)
Customer Portal Terms of Use
(https://access.redhat.com/help/terms/)
All Policies and Guidelines (http://www.redhat.com/en/about/all-
policies-guidelines)
Cookie Preferences
Copyright © 2020 Red Hat, Inc.

https://access.redhat.com/solutions/1583183 5/5

Vous aimerez peut-être aussi