Replies: 4 comments 2 replies
-
|
Hi @fgonz8 can you check the "How do I diagnose an SSL connection problem?" at the end of this page: https://faq.teclib.com/02_FAQ/Agent/#glpi-agent ? This should tell you first if something is wrong in your setup. |
Beta Was this translation helpful? Give feedback.
-
|
Hello @g-bougard This is the output of: I don´t find any error or I don't know how to interpreted in the output of the command. I haven't the public key certificate in the client configuration. I suposse it's not necesary. Thanks in advance. Note: I changed my true domain to mydomain.com |
Beta Was this translation helpful? Give feedback.
-
|
Hi @fgonz8 as you can see, your server answered this time to SSL request and provided a valided certificate. This means the agent can communicate with your server. This test was in console context, maybe something in your configuration is not correct. Anyway in your first post, you seem to have used a different URL:
I of course understand you obfuscate your domain for privacy and this is not a problem. But you need to be consistent so we are confused by the FQDN domain you're using. My guess is you used a wrong url with the wrong domain the first time. And this domain was not in the In the case you obtain this debug output from a different computer than the faulty one, you are just showing you are using a wrong configuration on the first computer. If the url on the first computer should be valid, this also can mean your server certificate is not correct as the expected domain is not supported. |
Beta Was this translation helpful? Give feedback.
-
|
Hi @g-bougard I write several URL by error to obfuscate my real domain. But the correct URL putted in the form in the process of installation of the agent, that is written in the Windows' register: It's correct because when I put no_ssl_check=1 and put the value of ssl_fingerprint, the inventaried operation is fine. In the line: apparears the true URL but as alias of the certificate. I don't know if the problem is by that. And by other hand if I put ssl_no_check=0 I obtain the initial problem: [error] [http client] internal response: 500 Can't connect to glpi.mydomain.com:443 (Bad file descriptor), SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed I don't know what is the problem. Thanks in advance |
Beta Was this translation helpful? Give feedback.
-
|
The problem was solved!! Finally the problem was with the CA (Certified Authority). It was necessary to have this file and not was provided, a file Sectigo.pem. This file was concatenated with the cert.pem in a new cert.pem file, and the problem dissapear, after reboot my Traefik docker container. Best regards!! |
Beta Was this translation helpful? Give feedback.
-
Your question
Hello.
I am deploying a new agent infrastructure against a GLPI server. This GLPI server is mounted as a container, with Docker and Traefik. The management of the certificates that are generated with Certbot, is done by Traefik.
The case is that I can access perfectly to
https://myweb.mydomain.com, but at agent level I get the following error log:If in the Windows registry of the client machines I set the registry value no_ssl_check = 1 and in ssl_fingerprint I set the value that is reported in the log, I get the agent to communicate with the server and capture data from the machines, but I would like it to work by SSL.
The actual site is an alias in the certificate, not the original name of the host. I don´t know if the agent is to be able to recognize the alias of the certificate.
Any ideas?
Thanks
Beta Was this translation helpful? Give feedback.
All reactions