probleme de remonter des agent en htttps [closed]

Question

merci beaucoup pour ta reponse.mais j'ai un autre soucis pour remonter mes agent en https.jai parcouru des topics pour ca mes sans succes voici ce que ca donne avec ocsinventory --debug

[debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[debug] Log system initialised (Stderr)
[debug] --scan-homedirs missing. Don't scan user directories
[debug] Accountinfo file: /var/lib/ocsinventory-agent/https:__192.168.0.87_ocsinventory/ocsinv.adm
[debug] OCS Agent initialised
[debug] Turns hooks on for /etc/ocsinventory/modules.conf
[debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[debug] Log system initialised (Stderr)
[debug] Calling handlers : `start_handler'
[debug] [download] Calling download_start_handler
[debug]  - LWP loaded
[debug]  - LWP::Protocol::https loaded
[debug] Compress::Zlib is available.
[debug] Calling handlers : `prolog_writer'
[debug] sending XML
[debug] sending: <?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
  <DEVICEID>esi-Precision-WorkStation-670-2014-11-26-17-05-46</DEVICEID>
  <QUERY>PROLOG</QUERY>
</REQUEST>
[error] Cannot establish communication : 500 Can't connect to 192.168.0.87:443 (certificate verify failed)

 

 

voici aussi le fichier error.log de apache2nventory-server: Can't load SOAP::Transport::HTTP* - Web service will be unavailable
[Thu Nov 27 13:26:57.601782 2014] [ssl:warn] [pid 20945] AH01909: RSA certificate configured for 192.168.0.87:443 does NOT include an ID which matches the server name
[Thu Nov 27 13:26:57.602404 2014] [ssl:warn] [pid 20945] AH01909: RSA certificate configured for 192.168.0.87:443 does NOT include an ID which matches the server name
[Thu Nov 27 13:26:57.602599 2014] [ssl:warn] [pid 20945] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
ocsinventory-server: Can't load SOAP::Transport::HTTP* - Web service will be unavailable
[Thu Nov 27 13:26:58.017518 2014] [ssl:warn] [pid 20946] AH01909: RSA certificate configured for 192.168.0.87:443 does NOT include an ID which matches the server name
[Thu Nov 27 13:26:58.018156 2014] [ssl:warn] [pid 20946] AH01909: RSA certificate configured for 192.168.0.87:443 does NOT include an ID which matches the server name
[Thu Nov 27 13:26:58.018370 2014] [ssl:warn] [pid 20946] AH02292: Init: Name-based SSL virtual hosts only work for clients with TLS server name indication support (RFC 4366)
[Thu Nov 27 13:26:58.031317 2014] [mpm_prefork:notice] [pid 20946] AH00163: Apache/2.4.7 (Ubuntu) PHP/5.5.9-1ubuntu4.4 OpenSSL/1.0.1f mod_perl/2.0.8 Perl/v5.18.2 configured -- resuming normal operations
[Thu Nov 27 13:26:58.031489 2014] [core:notice] [pid 20946] AH00094: Command line: '/usr/sbin/apache2'

help?

Answer 1

Les certificats SSL marche largement mieux quand on utilise un nom DNS et pas une IP pour se connecter au serveur. Le mieux est donc de créer ton certificat avec comme champs CN le nom DNS complet (ocs.mondomain.local par exemple) et d'appeler ton serveur avec ce nom là.

Comments

salut!!!!! kapouik  tout d'abord je tenais a te remercier pour tous ce que tu fais pour ocs!!!!si tu pouvais apporter un peu de precision sur ta reponse ca va vraiment m'aider

Answer 2

j'ai edité le fichier /etc/hosts et j'ai mis mon_ip ocsinventory ensuite en creant le certificat j'ai mis dans CN ocsinventory. mai c'est toujours pareil.dites moi dois je forcement mettre en place un serveur DNS.voici mon fichier hosts

127.0.0.1    localhost
127.0.1.1    esi-Precision-WorkStation-670
192.168.0.87    ocsinventory

Comments

please i need your help