Mandi! Guillaume Rousse
In chel di` si favelave...
> >This is a SSL issue. Did you configure the agent to use the correct
> >cacert.pem file? Can you try with the --no-ssl-check parameter?
To Gonéri, clearly with --no-ssl-check works.
> This is an hostname mismatch issue: the URL uses
> 'helpdesk.ct.lnf.it' whereas the certificate is only valid for
> 'meti.ct.lnf.it'. Only --no-ssl-check will help there, certification
> authority is not in cause.
But i use 'subject alt name' as '*.ct.lnf.it', and i've had no trouble
at all with browsers and other tool to verify certificates, and event
the windows version of the client connect with no trouble at all.
The log say:
'/C=IT/ST=Salerno/L=Cava De' Tirreni/O=Associazione La Nostra Famiglia/OU=Cava
De' Tirreni/CN=meti.ct.lnf.it' !~ //CN=(helpdesk|\*)\.ct\.lnf\.it($|\/)/`
But the regexp seems to me wrong, better:
/\/CN=(helpdesk|\*)\.ct\.lnf\.it($|\/)/
and this way will match...
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/
Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)sv.lnf.it tel +39-0434-842711 fax +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/chi_siamo/5xmille.php
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
_______________________________________________
Fusioninventory-user mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/fusioninventory-user
