no connection over https for windows clients

Question

Hi Team,
I have configured my OCSinventory server with valid certificates. but when I try to sync my OCS windows client systems over HTTPS it's not getting sync & getting below error.
(ERROR * AGENT => Failed to send Prolog <SSL peer certificate or SSH remote key was not OK>)

I am able to sync my OCS clients from Linux & MAC OS over HTTPS. facing issue with windows clients only.

Please find below details of the server.
Server details
OS: Debian 10 buster
OCS server version: 2.8
WebServer : Apache (2.4.38-3+deb10u5)

Answer 1

Hi,

What is the value of the cn field in the certificate ? What is the value of the server variable in ocsinventory.ini file ?

Answer 2

here is my ocsinventory.ini file details

[OCS Inventory Agent]

ComProvider=ComHTTP.dll

Debug=0

Local=

NoSoftware=0

HKCU=0

NoTAG=0

IpDisc=

[HTTP]

Server=https://abc.xyz.net/ocsinventory

SSL=1

CaBundle=C:\temp\cacert.pem

AuthRequired=0

User=

Pwd=

ProxyType=0

Proxy=

ProxyPort=0

ProxyAuthRequired=0

ProxyUser=

ProxyPwd=

[OCS Inventory Service]

TTO_WAIT=420

INVENTORY_ON_STARTUP=0

Answer 3

The error message give indication for an error with the certificate.

I suggest to verify it with a navigator (Firefox, Chrome) with the url https://server/ocsreports : you can get information of the certificate and build correctly the file cacert.pem.

The file 'cacert.pem' need to have the first certificate, then the second, then the third (here case of a wildcard signed certificate), each exported as 'X509 base 64 encoded .cer'.

May be better to save the 'cacert.pem' in the folder %programdata%\OCS Inventory NG\Agent ?

Answer 4

Hey,
We have resolved this issue by generating a self-sign certificate on the OCS server.