Welcome to OCS Inventory NG community support, where you can ask questions and receive answers from other members of the community.

Please ask questions only in English or French.

Release 2.12.3 available

The official documentation can be found on https://wiki.ocsinventory-ng.org. Read it before asking your question.

Certificate check fails [closed]

Hi,

I have to set ssl=0 otherwise it fails, these is the log:

[vie 21 oct 2016 12:17:52 ART] Running ocsinventory-agent --wait 100 --tag=ZN
[Fri Oct 21 12:17:52 2016][debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[Fri Oct 21 12:17:52 2016][debug] Log system initialised (File)
[Fri Oct 21 12:17:52 2016][debug] --scan-homedirs missing. Don't scan user directories
[Fri Oct 21 12:17:52 2016][debug] Accountinfo file: /var/lib/ocsinventory-agent/https:__soporte.example.com_ocsinventory/ocsinv.adm
[Fri Oct 21 12:17:52 2016][info] Accountinfo file doesn't exist. I create an empty one.
[Fri Oct 21 12:17:52 2016][debug] Invalid parameter while writing accountinfo file
[Fri Oct 21 12:17:52 2016][debug] Account info updated successfully
[Fri Oct 21 12:17:52 2016][debug] OCS Agent initialised
[Fri Oct 21 12:17:52 2016][info] Going to sleep for 38 second(s)
[Fri Oct 21 12:18:30 2016][debug] Turns hooks on for /etc/ocsinventory/modules.conf
[Fri Oct 21 12:18:30 2016][debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[Fri Oct 21 12:18:30 2016][debug] Log system initialised (File)
[Fri Oct 21 12:18:30 2016][debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[Fri Oct 21 12:18:30 2016][debug] Log system initialised (File)
[Fri Oct 21 12:18:30 2016][debug] Calling handlers : `start_handler'
[Fri Oct 21 12:18:30 2016][debug] [download] Calling download_start_handler
[Fri Oct 21 12:18:30 2016][debug]  - LWP loaded
[Fri Oct 21 12:18:30 2016][debug]  - LWP::Protocol::https loaded
[Fri Oct 21 12:18:30 2016][debug] Compress::Zlib is available.
[Fri Oct 21 12:18:30 2016][debug] Calling handlers : `prolog_writer'
[Fri Oct 21 12:18:30 2016][debug] sending XML
[Fri Oct 21 12:18:30 2016][debug] sending: <?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
  <DEVICEID>squid-2016-09-19-12-05-49</DEVICEID>
  <QUERY>PROLOG</QUERY>
</REQUEST>
[Fri Oct 21 12:18:30 2016][error] Cannot establish communication : 500 Can't connect to soporte.example.com:443
[vie 21 oct 2016 12:18:30 ART] End of cron job (/sbin:/bin:/usr/sbin:/usr/bin)

The agent is Ocsinventory unified agent for UNIX, Linux and MacOSX (2.1.1). Windows is failing too.

I'm using Let's Encrypt, but HTTPS works fine in Apache. I've tried both with CA cert only and with fullchain. Am I doing wrong?

EDIT: Add my information of Wireshark:

11    0.045189    192.168.6.13    x.y.20.179    TLSv1    73    Alert (Level:

 Fatal, Description: Unknown CA)

My agent config is:

debug=1
ca=/etc/ocsinventory-agent/CaCert-LE.pem
ssl=1
server=https://soporte.silicon-aid.com/ocsinventory
logger = Stderr
logfile = /var/log/ocsinventory-agent/ocsinventory-agent.log
tag=ZN

closed with the note: Question closed - No answer since 28/10/2016
in OCS Inventory NG agent for Unix by (140 points)
closed by

1 Answer

0 votes

Hi,

  1. Please post content of apache error_log file.
  2. How have you build your certificate?
Regards
Frank
by (90.4k points)
 
Powered by Question2Answer
...