[Fusioninventory-user] First install, some question.

Marco Gaiarin gaio at sv.lnf.it
Fri Jun 1 13:52:31 UTC 2012


Mandi! Guillaume Rousse
  In chel di` si favelave...

> >This is a SSL issue. Did you configure the agent to use the correct
> >cacert.pem file? Can you try with the --no-ssl-check parameter?

To Gonéri, clearly with --no-ssl-check works.


> This is an hostname mismatch issue: the URL uses
> 'helpdesk.ct.lnf.it' whereas the certificate is only valid for
> 'meti.ct.lnf.it'. Only --no-ssl-check will help there, certification
> authority is not in cause.

But i use 'subject alt name' as '*.ct.lnf.it', and i've had no trouble
at all with browsers and other tool to verify certificates, and event
the windows version of the client connect with no trouble at all.

The log say:

 '/C=IT/ST=Salerno/L=Cava De' Tirreni/O=Associazione La Nostra Famiglia/OU=Cava De' Tirreni/CN=meti.ct.lnf.it' !~ //CN=(helpdesk|\*)\.ct\.lnf\.it($|\/)/`

But the regexp seems to me wrong, better:

	/\/CN=(helpdesk|\*)\.ct\.lnf\.it($|\/)/

and this way will match...

-- 
dott. Marco Gaiarin				    GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''                http://www.sv.lnf.it/
  Polo FVG  -  Via della Bontà, 7 - 33078  -  San Vito al Tagliamento (PN)
  marco.gaiarin(at)sv.lnf.it	  tel +39-0434-842711  fax +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
	   http://www.lanostrafamiglia.it/chi_siamo/5xmille.php
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the Fusioninventory-user mailing list