[icinga-users] API TLS error which was fixed in previous version

NOC noc at babylon.network
Fri Nov 20 20:54:57 CET 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Awesome! This seems the easiest way then as I only have around 30 nodes.

Thanks!

On 11/20/2015 06:16 PM, Michael Friedrich wrote:
> Yep :-)
> 
>> Am 20.11.2015 um 17:55 schrieb NOC <noc at babylon.network>:
>> 
> But basically I can create new certificates with:
> 
> * pki new-ca (sets up a new CA) * pki new-cert (creates a new CSR) 
> * pki request (requests a certificate)
> 
> and run 'node wizard' on all nodes to fix it and make it work with
> the new certificates?
> 
>>>> On 11/20/15 5:42 PM, NOC wrote: Thanks for explaining what
>>>> the problem seems to be. Your explanation makes sense.
>>>> 
>>>>> On 11/20/15 5:34 PM, Michael Friedrich wrote: openssl x509
>>>>> -in mbmif.int.netways.de.crt -text
>>>> 
>>>> The headers are:
>>>> 
>>>> Certificate: Data: Version: 1 (0x0) Serial Number: 1 (0x1) 
>>>> Signature Algorithm: sha256WithRSAEncryption Issuer:
>>>> CN=Icinga CA Validity Not Before: Jun 15 16:25:02 2015 GMT
>>>> Not After : Jun  7 16:25:02 2045 GMT Subject:
>>>> CN=icinga0.babylon.network Subject Public Key Info: Public
>>>> Key Algorithm: rsaEncryption Public-Key: (4096 bit) Modulus:
>>>> 00:e4:f8:ce:21:11:fd:cb:a2:77:c6:d5:24:7d:3c: 
>>>> 58:e3:36:c2:9f:cf:df:2e:ad:f5:fb:85:81:28:30: 
>>>> ef:81:42:c2:76:c7:7c:9a:92:66:35:8a:e9:f5:69: 
>>>> 6f:e3:4d:ee:58:23:8b:48:46:91:60:3f:a3:d3:44: 
>>>> 78:e2:58:7b:fa:e0:ed:47:89:c0:f6:e2:b9:a9:27: 
>>>> 0b:53:25:e6:01:46:3c:46:ff:1d:6c:2b:b7:c4:10: 
>>>> b3:3d:23:e8:bb:1a:d8:5b:f5:6f:c5:f5:fe:80:c6: 
>>>> 29:df:13:e4:ae:e9:99:1c:53:25:81:44:6c:d6:f0: 
>>>> 61:33:2c:da:51:c1:5e:77:49:95:c5:a7:d2:13:3d: 
>>>> c0:8d:20:60:31:27:3a:b8:11:f2:84:4a:22:27:a8: 
>>>> 95:90:5f:4f:57:fc:f5:07:76:24:a0:ea:ec:a4:07: 
>>>> 01:70:da:9c:22:1e:cf:27:9c:aa:dc:58:f5:15:45: 
>>>> 67:25:f4:c2:31:c4:da:ad:41:1a:0a:d5:19:7d:3c: 
>>>> 2b:90:d3:26:82:9a:17:ce:5b:e2:41:8a:54:33:b3: 
>>>> 7e:9d:ec:10:fe:73:3a:c8:9c:bd:26:4f:ce:fe:12: 
>>>> 1a:ea:39:bd:a5:da:5f:39:70:a1:d8:f8:02:50:07: 
>>>> 1f:08:65:69:b4:e3:05:9b:e7:da:8b:cb:d4:1f:ee: 
>>>> 69:fd:9b:0f:dd:8a:27:ee:54:2a:80:d2:f8:f6:7e: 
>>>> 62:a9:91:92:e4:e0:21:e7:23:eb:fa:57:d5:9d:3c: 
>>>> fe:bb:23:bb:86:9c:a5:39:57:db:27:e1:07:9a:42: 
>>>> 85:64:02:57:30:88:f2:97:ff:3a:3e:f1:32:7e:88: 
>>>> d2:7b:f3:67:29:10:32:3b:ca:37:81:71:5c:e5:5c: 
>>>> b5:c9:2e:da:24:cc:97:1b:5b:f5:7c:04:80:1d:b5: 
>>>> 91:06:ef:a5:3d:d0:55:5e:8f:97:af:6e:dd:ce:88: 
>>>> 7f:bd:a8:d8:dd:42:e8:bf:15:9b:9d:24:93:cf:81: 
>>>> 6d:41:1d:1c:79:a5:7e:f1:66:12:93:b6:d9:05:63: 
>>>> b5:c0:87:2b:f5:d2:5e:04:61:41:9b:8d:cc:93:c9: 
>>>> 11:2c:1a:2d:08:f1:10:a7:ec:7d:78:37:0f:94:83: 
>>>> d2:a2:73:73:6e:b2:29:87:f4:d9:28:be:5f:46:ed: 
>>>> 89:43:11:4d:a0:68:71:13:25:3b:0d:7e:45:39:84: 
>>>> 37:b1:82:e2:90:00:9f:b7:88:a1:39:39:87:77:9a: 
>>>> 69:2c:13:67:d0:3e:fb:f3:2f:6f:1f:78:d5:80:1c: 
>>>> af:61:b9:fd:f9:56:ad:32:77:7e:7a:5a:70:3c:85: 
>>>> aa:49:14:df:62:4b:71:c2:f5:d8:94:05:6c:31:b0: 99:d9:e7
>>>> Exponent: 65537 (0x10001) Signature Algorithm:
>>>> sha256WithRSAEncryption 
>>>> 3a:00:42:c2:24:83:39:4c:d4:5f:a8:ed:3c:07:c8:88:2a:3e: 
>>>> a8:47:b3:ce:df:94:6d:6d:8d:c8:cb:38:3c:7f:d7:92:b8:53: 
>>>> 8b:e2:9f:42:89:63:f8:c8:b1:3f:42:2d:ef:67:89:bd:7b:6d: 
>>>> 29:c9:e4:83:33:78:a7:86:35:6c:11:4b:6c:f5:51:ed:a3:ca: 
>>>> f8:ab:d8:f0:cc:c4:5f:17:08:a3:e0:95:7d:df:29:c0:45:60: 
>>>> ff:1c:66:35:96:32:ca:ef:9e:4e:b6:b7:f6:39:48:e3:6b:dd: 
>>>> b8:b2:c3:d8:1d:3d:ce:99:ca:79:bf:1a:36:a9:cc:4e:ad:f1: 
>>>> 52:70:c1:1d:c9:63:07:38:c3:b0:c1:c1:55:54:3e:0f:92:f8: 
>>>> a8:f7:56:33:e9:40:1c:28:9b:3b:5b:8c:ea:bc:70:c6:46:68: 
>>>> 91:21:a4:36:8a:53:a3:ef:04:4f:e1:80:2d:6a:dd:44:e2:40: 
>>>> 6b:00:43:81:7d:fc:99:45:3e:99:ff:a8:da:36:a5:66:cb:9f: 
>>>> 30:f4:da:67:44:07:96:a9:9d:48:41:27:e1:f0:6a:d9:1c:ef: 
>>>> 90:6f:05:7d:fd:e9:d3:49:66:d0:60:a7:4c:cf:03:90:57:5e: 
>>>> d9:2d:dd:15:b6:c4:58:02:bd:c5:83:ed:0d:65:6e:46:00:ea: 
>>>> e8:77:6c:02:57:64:25:19:b6:ef:80:17:89:b6:e7:c5:8e:a5: 
>>>> a9:f8:37:e3:07:e0:59:36:3e:97:16:e3:07:ee:3e:8d:71:00: 
>>>> d6:36:c2:6a:46:2c:d1:9a:3a:76:29:0e:9a:18:23:24:10:74: 
>>>> 10:b2:a1:c7:07:d2:c7:aa:c6:cd:71:17:b2:7d:1b:f2:22:a5: 
>>>> a7:2d:0a:68:13:8d:3b:e8:5a:9f:e3:26:90:35:12:09:46:cf: 
>>>> 5f:56:3e:f1:22:71:d9:af:29:df:ab:d9:f8:20:14:13:ee:2a: 
>>>> ca:1d:04:47:42:3f:d1:9f:02:91:5b:10:02:67:db:3a:93:7b: 
>>>> 3d:2d:1a:9a:d6:6d:2c:55:a2:5b:5e:66:0d:9b:33:90:9d:98: 
>>>> 98:5d:7e:4e:06:07:0e:78:21:04:1e:f0:25:ad:0a:bc:73:35: 
>>>> dc:c2:87:87:18:a0:c8:be:80:ae:d4:2b:43:b4:11:74:9d:9e: 
>>>> 7f:f4:67:4e:c9:27:e5:92:b2:84:8d:bc:0b:e9:03:f8:7a:90: 
>>>> 61:15:db:19:f5:fa:a8:cb:cf:79:52:94:c5:f1:a0:0b:8a:bd: 
>>>> f0:8e:18:c8:be:c4:28:d5:5e:78:be:46:c8:d4:75:b3:2a:fd: 
>>>> 29:fe:0f:a4:8e:ef:81:56:e3:a5:e0:80:f8:e5:29:ff:e3:3d: 
>>>> 04:d2:da:32:36:e5:6b:6c
>>>> 
>>>> _______________________________________________ icinga-users 
>>>> mailing list icinga-users at lists.icinga.org 
>>>> https://lists.icinga.org/mailman/listinfo/icinga-users
> 
>> _______________________________________________ icinga-users
>> mailing list icinga-users at lists.icinga.org 
>> https://lists.icinga.org/mailman/listinfo/icinga-users
> 
> --? Michael Friedrich, DI (FH) Senior Developer
> 
> NETWAYS GmbH | Deutschherrnstr. 15-19 | D-90429 Nuernberg Tel: +49
> 911 92885-0 | Fax: +49 911 92885-77 GF: Julian Hein, Bernd Erk | AG
> Nuernberg HRB18461 http://www.netways.de |
> Michael.Friedrich at netways.de
> 
> ** OSMC 2015 - November - netways.de/osmc ** ** OSDC 2016 - April –
> netways.de/osdc **
> 

- -- 
Tim Semeijn
Babylon Network

PGP: 0x2A540FA5 / 3DF3 13FA 4B60 E48A E755 9663 B187 0310 2A54 0FA5
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=kWtj
-----END PGP SIGNATURE-----


More information about the icinga-users mailing list