h1. ERF50-5345

Make sure SSL is enabled in foreman-proxy:

<pre>

:enabled: https

</pre>

In some cases the Foreman web interface fails to list the host certificates in the "infrastucture"=>"Puppet CA" section. Instead of listing the host certificates it may show the following error:

    Failure: ERF50-5345 [Foreman::WrappedException]: Unable to connect ([ProxyAPI::ProxyException]: ERF12-5356 [ProxyAPI::ProxyException]: Unable to get PuppetCA certificates ([RestClient::NotAcceptable]: 406 Not Acceptable) for proxy ...

This is most likely due to missing sudo permissions for the local user foreman-proxy. Make sure that

1. The sudo permissions are correct, ie the file /etc/sudoers.d/foreman-proxy contains

       foreman-proxy ALL = (root) NOPASSWD : /opt/puppetlabs/bin/puppetserver ca *

       Defaults:foreman-proxy !requiretty

2. The sudo permissions apply for local users, ie /etc/security/access.conf contains

       +:ALL:LOCAL