[icinga-users] API TLS error which was fixed in previous version

NOC noc at babylon.network
Fri Nov 20 17:55:07 CET 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

But basically I can create new certificates with:

* pki new-ca (sets up a new CA)
* pki new-cert (creates a new CSR)
* pki request (requests a certificate)

and run 'node wizard' on all nodes to fix it and make it work with the
new certificates?

On 11/20/15 5:42 PM, NOC wrote:
> Thanks for explaining what the problem seems to be. Your
> explanation makes sense.
> 
> On 11/20/15 5:34 PM, Michael Friedrich wrote:
>> openssl x509 -in mbmif.int.netways.de.crt -text
> 
> The headers are:
> 
> Certificate: Data: Version: 1 (0x0) Serial Number: 1 (0x1) 
> Signature Algorithm: sha256WithRSAEncryption Issuer: CN=Icinga CA 
> Validity Not Before: Jun 15 16:25:02 2015 GMT Not After : Jun  7
> 16:25:02 2045 GMT Subject: CN=icinga0.babylon.network Subject
> Public Key Info: Public Key Algorithm: rsaEncryption Public-Key:
> (4096 bit) Modulus: 00:e4:f8:ce:21:11:fd:cb:a2:77:c6:d5:24:7d:3c: 
> 58:e3:36:c2:9f:cf:df:2e:ad:f5:fb:85:81:28:30: 
> ef:81:42:c2:76:c7:7c:9a:92:66:35:8a:e9:f5:69: 
> 6f:e3:4d:ee:58:23:8b:48:46:91:60:3f:a3:d3:44: 
> 78:e2:58:7b:fa:e0:ed:47:89:c0:f6:e2:b9:a9:27: 
> 0b:53:25:e6:01:46:3c:46:ff:1d:6c:2b:b7:c4:10: 
> b3:3d:23:e8:bb:1a:d8:5b:f5:6f:c5:f5:fe:80:c6: 
> 29:df:13:e4:ae:e9:99:1c:53:25:81:44:6c:d6:f0: 
> 61:33:2c:da:51:c1:5e:77:49:95:c5:a7:d2:13:3d: 
> c0:8d:20:60:31:27:3a:b8:11:f2:84:4a:22:27:a8: 
> 95:90:5f:4f:57:fc:f5:07:76:24:a0:ea:ec:a4:07: 
> 01:70:da:9c:22:1e:cf:27:9c:aa:dc:58:f5:15:45: 
> 67:25:f4:c2:31:c4:da:ad:41:1a:0a:d5:19:7d:3c: 
> 2b:90:d3:26:82:9a:17:ce:5b:e2:41:8a:54:33:b3: 
> 7e:9d:ec:10:fe:73:3a:c8:9c:bd:26:4f:ce:fe:12: 
> 1a:ea:39:bd:a5:da:5f:39:70:a1:d8:f8:02:50:07: 
> 1f:08:65:69:b4:e3:05:9b:e7:da:8b:cb:d4:1f:ee: 
> 69:fd:9b:0f:dd:8a:27:ee:54:2a:80:d2:f8:f6:7e: 
> 62:a9:91:92:e4:e0:21:e7:23:eb:fa:57:d5:9d:3c: 
> fe:bb:23:bb:86:9c:a5:39:57:db:27:e1:07:9a:42: 
> 85:64:02:57:30:88:f2:97:ff:3a:3e:f1:32:7e:88: 
> d2:7b:f3:67:29:10:32:3b:ca:37:81:71:5c:e5:5c: 
> b5:c9:2e:da:24:cc:97:1b:5b:f5:7c:04:80:1d:b5: 
> 91:06:ef:a5:3d:d0:55:5e:8f:97:af:6e:dd:ce:88: 
> 7f:bd:a8:d8:dd:42:e8:bf:15:9b:9d:24:93:cf:81: 
> 6d:41:1d:1c:79:a5:7e:f1:66:12:93:b6:d9:05:63: 
> b5:c0:87:2b:f5:d2:5e:04:61:41:9b:8d:cc:93:c9: 
> 11:2c:1a:2d:08:f1:10:a7:ec:7d:78:37:0f:94:83: 
> d2:a2:73:73:6e:b2:29:87:f4:d9:28:be:5f:46:ed: 
> 89:43:11:4d:a0:68:71:13:25:3b:0d:7e:45:39:84: 
> 37:b1:82:e2:90:00:9f:b7:88:a1:39:39:87:77:9a: 
> 69:2c:13:67:d0:3e:fb:f3:2f:6f:1f:78:d5:80:1c: 
> af:61:b9:fd:f9:56:ad:32:77:7e:7a:5a:70:3c:85: 
> aa:49:14:df:62:4b:71:c2:f5:d8:94:05:6c:31:b0: 99:d9:e7 Exponent:
> 65537 (0x10001) Signature Algorithm: sha256WithRSAEncryption 
> 3a:00:42:c2:24:83:39:4c:d4:5f:a8:ed:3c:07:c8:88:2a:3e: 
> a8:47:b3:ce:df:94:6d:6d:8d:c8:cb:38:3c:7f:d7:92:b8:53: 
> 8b:e2:9f:42:89:63:f8:c8:b1:3f:42:2d:ef:67:89:bd:7b:6d: 
> 29:c9:e4:83:33:78:a7:86:35:6c:11:4b:6c:f5:51:ed:a3:ca: 
> f8:ab:d8:f0:cc:c4:5f:17:08:a3:e0:95:7d:df:29:c0:45:60: 
> ff:1c:66:35:96:32:ca:ef:9e:4e:b6:b7:f6:39:48:e3:6b:dd: 
> b8:b2:c3:d8:1d:3d:ce:99:ca:79:bf:1a:36:a9:cc:4e:ad:f1: 
> 52:70:c1:1d:c9:63:07:38:c3:b0:c1:c1:55:54:3e:0f:92:f8: 
> a8:f7:56:33:e9:40:1c:28:9b:3b:5b:8c:ea:bc:70:c6:46:68: 
> 91:21:a4:36:8a:53:a3:ef:04:4f:e1:80:2d:6a:dd:44:e2:40: 
> 6b:00:43:81:7d:fc:99:45:3e:99:ff:a8:da:36:a5:66:cb:9f: 
> 30:f4:da:67:44:07:96:a9:9d:48:41:27:e1:f0:6a:d9:1c:ef: 
> 90:6f:05:7d:fd:e9:d3:49:66:d0:60:a7:4c:cf:03:90:57:5e: 
> d9:2d:dd:15:b6:c4:58:02:bd:c5:83:ed:0d:65:6e:46:00:ea: 
> e8:77:6c:02:57:64:25:19:b6:ef:80:17:89:b6:e7:c5:8e:a5: 
> a9:f8:37:e3:07:e0:59:36:3e:97:16:e3:07:ee:3e:8d:71:00: 
> d6:36:c2:6a:46:2c:d1:9a:3a:76:29:0e:9a:18:23:24:10:74: 
> 10:b2:a1:c7:07:d2:c7:aa:c6:cd:71:17:b2:7d:1b:f2:22:a5: 
> a7:2d:0a:68:13:8d:3b:e8:5a:9f:e3:26:90:35:12:09:46:cf: 
> 5f:56:3e:f1:22:71:d9:af:29:df:ab:d9:f8:20:14:13:ee:2a: 
> ca:1d:04:47:42:3f:d1:9f:02:91:5b:10:02:67:db:3a:93:7b: 
> 3d:2d:1a:9a:d6:6d:2c:55:a2:5b:5e:66:0d:9b:33:90:9d:98: 
> 98:5d:7e:4e:06:07:0e:78:21:04:1e:f0:25:ad:0a:bc:73:35: 
> dc:c2:87:87:18:a0:c8:be:80:ae:d4:2b:43:b4:11:74:9d:9e: 
> 7f:f4:67:4e:c9:27:e5:92:b2:84:8d:bc:0b:e9:03:f8:7a:90: 
> 61:15:db:19:f5:fa:a8:cb:cf:79:52:94:c5:f1:a0:0b:8a:bd: 
> f0:8e:18:c8:be:c4:28:d5:5e:78:be:46:c8:d4:75:b3:2a:fd: 
> 29:fe:0f:a4:8e:ef:81:56:e3:a5:e0:80:f8:e5:29:ff:e3:3d: 
> 04:d2:da:32:36:e5:6b:6c
> 
> _______________________________________________ icinga-users
> mailing list icinga-users at lists.icinga.org 
> https://lists.icinga.org/mailman/listinfo/icinga-users
> 

- -- 
Tim Semeijn
Babylon Network

PGP: 0x2A540FA5 / 3DF3 13FA 4B60 E48A E755 9663 B187 0310 2A54 0FA5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
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=BIFa
-----END PGP SIGNATURE-----


More information about the icinga-users mailing list