Welcome to OCS Inventory NG community support, where you can ask questions and receive answers from other members of the community.

Please ask questions only in English or French.

Release 2.11.1 available

The official documentation can be found on http://wiki.ocsinventory-ng.org. Read it before asking your question.

Problem with the CaCert.pem file

Hi all,

I am using XAMPP. I have copied the server.crt certificate in c:\xampp\apache\conf\ssl.crt  . This certificate is generated during the installation of the OCS server within Windows Server R2 2008.   I have put the server.crt file in a folder located in the desktop of Windows server and this folder contains ocspackage.-2.1.1.1, ocs-ng-windows-agent-setup.exe-2.1.1.1, PsExec.exe,ocslogon.exe. Then I have renamed the server.crt certificate as Cacert.pem in this folder.

The problem is the Cacert.pem file becomes unusable.

This is an error message read in the ocsinventory.log file:

================= TRACE STOP ===============
ERROR *** AGENT => Failed to send Prolog <SSL peer certificate or SSH remote key was not OK>
AGENT => Unloading communication provider
AGENT => Unloading plug-in(s)
AGENT => Execution duration: 00:00:01.

Then, I have studied the issues about the cacert.pem certificate in the other forum of OCS.

These are the tasks I have performed:

In the directory  C:\xampp\apache I have opened the makecert.bat file and I have integrated these information:

Country Name (2 letter code) [AU]:UK
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:MYCITY
Organization Name (eg, company) [Internet Widgits Pty Ltd]:MYCOMPANY
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []: Name_of_the_server_hosting_OCSINVENTORY
Email Address []:my@address.com

I have stopped apache and restarted it

And now in the ocsinventory.log file I have got this message:

================= TRACE STOP ===============
ERROR *** AGENT => Failed to send Prolog <Peer certificate cannot be authenticated with known CA certificates>
AGENT => Unloading communication provider
AGENT => Unloading plug-in(s)
AGENT => Execution duration: 00:00:00.


Which steps I have probably missed?

thank you in advance and kind regards

Rony

in OCS Inventory NG agent for Windows by (280 points)
edited by

1 Answer

0 votes
Tu as tout ce qu'il faut dans ce lien:

http://wiki.ocsinventory-ng.org/index.php/Howtos:Generate_SSL_cert_on_windows/fr

Bonne continuation :)
by (200 points)
 
Powered by Question2Answer
...