Problem with the SSL CA cert (path? access rights?

Question

Hello everyone

I have a problem because the first machine where I install the agent gives me errors apparently with the certificate:

AGENT => Sending Prolog
DID_CHECK => Read DeviceID and MACs in file
COM SERVER => Initializing cURL library for sendRequest
COM SERVER => Using cURL without server authentication
COM SERVER => Disabling cURL proxy support
COM SERVER => Enabling cURL SSL server validation support using CA Bundle
COM SERVER => Sending HTTP Post request to URL
WARNING *** COM SERVER => Failed to send HTTP Post request
COM SERVER => Cleaning cURL library
ERROR *** AGENT => Failed to send Prolog

I have no idea about these things, so I'm not very clear where I went wrong, but from what I see in the log I should find in the folder "C:\ProgramData\OCS Inventory NG\Agent" the famous "cacert.pem ». Where can you get that certificate? Is it generated on the server and put on the client, or is it generated on the client? All of this probably has obvious answers, but as I told you, I have no knowledge about servers, certificates and these things, and I basically limited myself to following tutorials. I have to say that the server apparently seems to be running correctly (I can log in to their website without problems), but as the error says, it does not record clients data (everything appears as 0)

It seems strange to me because a couple of years ago I had installed this without problems and everything seemed to apparently work correctly, but in the end I didn't get to use it, I deleted the PC used as a server (Ubuntu 20.04)

Answer 1

Hello @leillo,

when creating the certificate from the OCS server :

The CN (Common Name) field must correspond to the DNS or IP address of the OCS server

A private key is generated (.key file), which will remain in its place on the OCS server (this file is confidential !)

A public key is generated (cacert.pem file), which will be copied both in place in the OCS server and in the Windows workstation to be inventoried (folder C:\ProgramData\OCS Inventory NG\Agent\)

Note 1 : For the communication to work, the OCS server must be accessible from the workstation where the OCS agent is installed.

Note 2: When installing the OCS agent, the OCS server address must correspond to the CN (IP or DNS) mentioned above :

You can check the value in ocsinventory.ini (Server= ...) of the workstation

and if necessary modify the value after stopping the OCS service