Hi,
after having tested OCS Inventory with an installed Server (without ssl) on a Laptop in our network, we now want to let the server run on our hardware-server. Therefore we activated SSL on the server.
Now, starting the first Agent with
sudo ocsinventory-agent --server https://inventory.ourdomain.de/ocsinventory --debug
I get the following output:
[Thu Aug 11 12:46:02 2016][debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[Thu Aug 11 12:46:02 2016][debug] Log system initialised (File)
[Thu Aug 11 12:46:02 2016][debug] --scan-homedirs missing. Don't scan user directories
[Thu Aug 11 12:46:03 2016][debug] Accountinfo file: /var/lib/ocsinventory-agent/https:__inventory.ourdomain.de_ocsinventory/ocsinv.adm
[Thu Aug 11 12:46:03 2016][debug] OCS Agent initialised
[Thu Aug 11 12:46:03 2016][debug] Turns hooks on for /etc/ocsinventory-agent/modules.conf
[Thu Aug 11 12:46:03 2016][debug] Ocsinventory unified agent for UNIX, Linux and MacOSX 2.1.1
[Thu Aug 11 12:46:03 2016][debug] Log system initialised (File)
[Thu Aug 11 12:46:03 2016][debug] Calling handlers : `start_handler'
[Thu Aug 11 12:46:03 2016][debug] [download] Calling download_start_handler
[Thu Aug 11 12:46:03 2016][debug] - LWP loaded
[Thu Aug 11 12:46:03 2016][debug] - LWP::Protocol::https loaded
[Thu Aug 11 12:46:03 2016][debug] Compress::Zlib is available.
[Thu Aug 11 12:46:03 2016][debug] Calling handlers : `prolog_writer'
[Thu Aug 11 12:46:03 2016][debug] sending XML
[Thu Aug 11 12:46:03 2016][debug] sending: <?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
<DEVICEID>kumja-sony-blau-2016-08-10-11-35-06</DEVICEID>
<QUERY>PROLOG</QUERY>
</REQUEST>
[Thu Aug 11 12:46:03 2016][error] Cannot establish communication : 500 Can't connect to inventory.ourdomain.de:443 (certificate verify failed)
I have put the fullchain.pem from the server as cacert.pem in the Agents /var/lib/ocsinventory-agent/https:__inventory.ourdomain.de_ocsinventory - directory. I thought, that I have to do this for the client for being able to verify the certificate. Because before I did this, the same error came, just without the notice (certificate verify failed).
Any help is much appreciated. Maybe a hint, what I have to do on the agents device for being able to do ssl with the Ocs-Server.
Everything (Server and Client) runs on a Linux Debian OS (Linux Mint).
If you have any further questions, please ask me for further informations.
Regards,
Dennie