[icinga-users] API TLS error which was fixed in previous version

Michael Friedrich Michael.Friedrich at netways.de
Fri Nov 20 18:16:54 CET 2015


Yep :-)

> Am 20.11.2015 um 17:55 schrieb NOC <noc at babylon.network>:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> But basically I can create new certificates with:
>
> * pki new-ca (sets up a new CA)
> * pki new-cert (creates a new CSR)
> * pki request (requests a certificate)
>
> and run 'node wizard' on all nodes to fix it and make it work with the
> new certificates?
>
>> On 11/20/15 5:42 PM, NOC wrote:
>> Thanks for explaining what the problem seems to be. Your
>> explanation makes sense.
>>
>>> On 11/20/15 5:34 PM, Michael Friedrich wrote:
>>> openssl x509 -in mbmif.int.netways.de.crt -text
>>
>> The headers are:
>>
>> Certificate: Data: Version: 1 (0x0) Serial Number: 1 (0x1)
>> Signature Algorithm: sha256WithRSAEncryption Issuer: CN=Icinga CA
>> Validity Not Before: Jun 15 16:25:02 2015 GMT Not After : Jun  7
>> 16:25:02 2045 GMT Subject: CN=icinga0.babylon.network Subject
>> Public Key Info: Public Key Algorithm: rsaEncryption Public-Key:
>> (4096 bit) Modulus: 00:e4:f8:ce:21:11:fd:cb:a2:77:c6:d5:24:7d:3c:
>> 58:e3:36:c2:9f:cf:df:2e:ad:f5:fb:85:81:28:30:
>> ef:81:42:c2:76:c7:7c:9a:92:66:35:8a:e9:f5:69:
>> 6f:e3:4d:ee:58:23:8b:48:46:91:60:3f:a3:d3:44:
>> 78:e2:58:7b:fa:e0:ed:47:89:c0:f6:e2:b9:a9:27:
>> 0b:53:25:e6:01:46:3c:46:ff:1d:6c:2b:b7:c4:10:
>> b3:3d:23:e8:bb:1a:d8:5b:f5:6f:c5:f5:fe:80:c6:
>> 29:df:13:e4:ae:e9:99:1c:53:25:81:44:6c:d6:f0:
>> 61:33:2c:da:51:c1:5e:77:49:95:c5:a7:d2:13:3d:
>> c0:8d:20:60:31:27:3a:b8:11:f2:84:4a:22:27:a8:
>> 95:90:5f:4f:57:fc:f5:07:76:24:a0:ea:ec:a4:07:
>> 01:70:da:9c:22:1e:cf:27:9c:aa:dc:58:f5:15:45:
>> 67:25:f4:c2:31:c4:da:ad:41:1a:0a:d5:19:7d:3c:
>> 2b:90:d3:26:82:9a:17:ce:5b:e2:41:8a:54:33:b3:
>> 7e:9d:ec:10:fe:73:3a:c8:9c:bd:26:4f:ce:fe:12:
>> 1a:ea:39:bd:a5:da:5f:39:70:a1:d8:f8:02:50:07:
>> 1f:08:65:69:b4:e3:05:9b:e7:da:8b:cb:d4:1f:ee:
>> 69:fd:9b:0f:dd:8a:27:ee:54:2a:80:d2:f8:f6:7e:
>> 62:a9:91:92:e4:e0:21:e7:23:eb:fa:57:d5:9d:3c:
>> fe:bb:23:bb:86:9c:a5:39:57:db:27:e1:07:9a:42:
>> 85:64:02:57:30:88:f2:97:ff:3a:3e:f1:32:7e:88:
>> d2:7b:f3:67:29:10:32:3b:ca:37:81:71:5c:e5:5c:
>> b5:c9:2e:da:24:cc:97:1b:5b:f5:7c:04:80:1d:b5:
>> 91:06:ef:a5:3d:d0:55:5e:8f:97:af:6e:dd:ce:88:
>> 7f:bd:a8:d8:dd:42:e8:bf:15:9b:9d:24:93:cf:81:
>> 6d:41:1d:1c:79:a5:7e:f1:66:12:93:b6:d9:05:63:
>> b5:c0:87:2b:f5:d2:5e:04:61:41:9b:8d:cc:93:c9:
>> 11:2c:1a:2d:08:f1:10:a7:ec:7d:78:37:0f:94:83:
>> d2:a2:73:73:6e:b2:29:87:f4:d9:28:be:5f:46:ed:
>> 89:43:11:4d:a0:68:71:13:25:3b:0d:7e:45:39:84:
>> 37:b1:82:e2:90:00:9f:b7:88:a1:39:39:87:77:9a:
>> 69:2c:13:67:d0:3e:fb:f3:2f:6f:1f:78:d5:80:1c:
>> af:61:b9:fd:f9:56:ad:32:77:7e:7a:5a:70:3c:85:
>> aa:49:14:df:62:4b:71:c2:f5:d8:94:05:6c:31:b0: 99:d9:e7 Exponent:
>> 65537 (0x10001) Signature Algorithm: sha256WithRSAEncryption
>> 3a:00:42:c2:24:83:39:4c:d4:5f:a8:ed:3c:07:c8:88:2a:3e:
>> a8:47:b3:ce:df:94:6d:6d:8d:c8:cb:38:3c:7f:d7:92:b8:53:
>> 8b:e2:9f:42:89:63:f8:c8:b1:3f:42:2d:ef:67:89:bd:7b:6d:
>> 29:c9:e4:83:33:78:a7:86:35:6c:11:4b:6c:f5:51:ed:a3:ca:
>> f8:ab:d8:f0:cc:c4:5f:17:08:a3:e0:95:7d:df:29:c0:45:60:
>> ff:1c:66:35:96:32:ca:ef:9e:4e:b6:b7:f6:39:48:e3:6b:dd:
>> b8:b2:c3:d8:1d:3d:ce:99:ca:79:bf:1a:36:a9:cc:4e:ad:f1:
>> 52:70:c1:1d:c9:63:07:38:c3:b0:c1:c1:55:54:3e:0f:92:f8:
>> a8:f7:56:33:e9:40:1c:28:9b:3b:5b:8c:ea:bc:70:c6:46:68:
>> 91:21:a4:36:8a:53:a3:ef:04:4f:e1:80:2d:6a:dd:44:e2:40:
>> 6b:00:43:81:7d:fc:99:45:3e:99:ff:a8:da:36:a5:66:cb:9f:
>> 30:f4:da:67:44:07:96:a9:9d:48:41:27:e1:f0:6a:d9:1c:ef:
>> 90:6f:05:7d:fd:e9:d3:49:66:d0:60:a7:4c:cf:03:90:57:5e:
>> d9:2d:dd:15:b6:c4:58:02:bd:c5:83:ed:0d:65:6e:46:00:ea:
>> e8:77:6c:02:57:64:25:19:b6:ef:80:17:89:b6:e7:c5:8e:a5:
>> a9:f8:37:e3:07:e0:59:36:3e:97:16:e3:07:ee:3e:8d:71:00:
>> d6:36:c2:6a:46:2c:d1:9a:3a:76:29:0e:9a:18:23:24:10:74:
>> 10:b2:a1:c7:07:d2:c7:aa:c6:cd:71:17:b2:7d:1b:f2:22:a5:
>> a7:2d:0a:68:13:8d:3b:e8:5a:9f:e3:26:90:35:12:09:46:cf:
>> 5f:56:3e:f1:22:71:d9:af:29:df:ab:d9:f8:20:14:13:ee:2a:
>> ca:1d:04:47:42:3f:d1:9f:02:91:5b:10:02:67:db:3a:93:7b:
>> 3d:2d:1a:9a:d6:6d:2c:55:a2:5b:5e:66:0d:9b:33:90:9d:98:
>> 98:5d:7e:4e:06:07:0e:78:21:04:1e:f0:25:ad:0a:bc:73:35:
>> dc:c2:87:87:18:a0:c8:be:80:ae:d4:2b:43:b4:11:74:9d:9e:
>> 7f:f4:67:4e:c9:27:e5:92:b2:84:8d:bc:0b:e9:03:f8:7a:90:
>> 61:15:db:19:f5:fa:a8:cb:cf:79:52:94:c5:f1:a0:0b:8a:bd:
>> f0:8e:18:c8:be:c4:28:d5:5e:78:be:46:c8:d4:75:b3:2a:fd:
>> 29:fe:0f:a4:8e:ef:81:56:e3:a5:e0:80:f8:e5:29:ff:e3:3d:
>> 04:d2:da:32:36:e5:6b:6c
>>
>> _______________________________________________ icinga-users
>> mailing list icinga-users at lists.icinga.org
>> https://lists.icinga.org/mailman/listinfo/icinga-users
>
> - --
> Tim Semeijn
> Babylon Network
>
> PGP: 0x2A540FA5 / 3DF3 13FA 4B60 E48A E755 9663 B187 0310 2A54 0FA5
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
> Comment: GPGTools - http://gpgtools.org
>
> iQIcBAEBCgAGBQJWT1BqAAoJELGHAxAqVA+lQzkP/2khuSMjWyNAKg+9BqsfwgPr
> 81In+agh75ELoSLL+xPGeIomHGLqO6Qe1T6y0POmCasku7+bNVd4T7zsKD2SGBeB
> ikzHg10Dvki+UOHlSoEXG/PX1xzfbN/t3yz6W3XE0npr2s0iwuVTZNxejJBJpshb
> nQGKl5ZdJWYPI1hLi2aNQYdN2iy3k3tiU6ApEQQvKJmUrpNYz9f5MgXOsGNfasFt
> GKUDCkl5oMQeUDFdNRwEHVRg9Kq6rJzFPCqHT6cRolswkNe7/6LwTjMsCVzqFZ52
> kq0F4mf/bT8c/DM24yJLYIcdoU9QUFO0qd48N4sMJuFnglSpJCMrqCpYUO9TlVfa
> U9Z8p73XKAfrqyBufy4sKadBfKJgy9IeC1X8HzB3CxL2mXznDhubajvSgMLsTwHF
> hgh/cIG7a5oFAP58rtcP7Cf3VAlYWF5Qas3Cd8QhdSTm/mEAavQntkvOIviYijpn
> aNJMvbGIS0GiAtrrKM86np6S7bCYFiRLw7bLRUZE67yOBFOJDCFGoFUfo+QD0r9q
> yDOHxMzpD0h433H5wG5ucR/n8ZJFBwKQ/jHoiWGZdSoJH8upx0Id6yGT3LoN4F9s
> cRilwwEufwsXivHmJLYdf3c7D4G1bDgjXHjDS7y5R7skwOA9HLYO4BFWbtz1NHoZ
> BMGa0VuM0AVLWFWTW6Rn
> =BIFa
> -----END PGP SIGNATURE-----
> _______________________________________________
> icinga-users mailing list
> icinga-users at lists.icinga.org
> https://lists.icinga.org/mailman/listinfo/icinga-users

-- 
Michael Friedrich, DI (FH)
Senior Developer

NETWAYS GmbH | Deutschherrnstr. 15-19 | D-90429 Nuernberg
Tel: +49 911 92885-0 | Fax: +49 911 92885-77
GF: Julian Hein, Bernd Erk | AG Nuernberg HRB18461
http://www.netways.de | Michael.Friedrich at netways.de

** OSMC 2015 - November - netways.de/osmc **
** OSDC 2016 - April – netways.de/osdc **


More information about the icinga-users mailing list