• Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login
  • Recent
  • Unsolved
  • Tags
  • Popular
  • Users
  • Groups
  • Search
  • Register
  • Login

Setting up trusted SSL certificate

Scheduled Pinned Locked Moved Solved
FOG Problems
4
13
3.2k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M
    Malte Will @Malte Will
    last edited by Jan 8, 2020, 1:47 PM

    This post is deleted!
    1 Reply Last reply Reply Quote 0
    • M
      Malte Will @Sebastian Roth
      last edited by Jan 8, 2020, 2:26 PM

      @Sebastian-Roth
      I found the tftp directory you specified in the rsync command in the packages folder in the fogproject code directory.
      86699205-315f-4e7a-9082-ed196f005447-grafik.png
      After executing the commands I am still stuck with the same problem.

      1 Reply Last reply Reply Quote 0
      • S
        Sebastian Roth Moderator
        last edited by Jan 8, 2020, 3:42 PM

        @Malte-Will said in Setting up trusted SSL certificate:

        After executing the commands I am still stuck with the same problem.

        What was the output of the second command?? Any errors??

        Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

        Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

        M 1 Reply Last reply Jan 8, 2020, 4:40 PM Reply Quote 0
        • M
          Malte Will @Sebastian Roth
          last edited by Jan 8, 2020, 4:40 PM

          @Sebastian-Roth
          I got no error messages by executing the commands.
          This is the output of the buildscript: output.txt
          This is the output from rsync: rsync-out.txt
          Am I missing anything.

          1 Reply Last reply Reply Quote 0
          • S
            Sebastian Roth Moderator
            last edited by Jan 8, 2020, 9:26 PM

            @Malte-Will Hmmm, my fault, sorry!!

            The command ./buildipxe.sh /path/to/your/wildcard/certificate.pem should have been ./buildipxe.sh /path/to/the/CA/cert/of/your/wildcard/certificate.pem

            What that means is, you need to compile iPXE with the certificate authority’s (CA) certificate included that was used to sign your wildcard cert. If you don’t know what that means you might want to tell us more about where you got the certificate from

            One more thing I missed to tell you. In case you want to use the fog-client software as well you will run into issues with your custom certificate. If you need to know more about this, I can give you the details.

            Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

            Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

            M C 2 Replies Last reply Jan 9, 2020, 8:17 AM Reply Quote 0
            • M
              Malte Will @Sebastian Roth
              last edited by Jan 9, 2020, 8:17 AM

              @Sebastian-Roth
              I tried compiling iPXE with our CAs certificate but still got the same result.
              We got two certificates in the cert-file, is that a problem?
              Bild_2020-01-09_09-14.png

              1 Reply Last reply Reply Quote 0
              • S
                Sebastian Roth Moderator
                last edited by Jan 9, 2020, 3:49 PM

                @Malte-Will From what I see I think you should use the Intermediate #2 certificate found here: https://support.comodo.com/index.php?/Knowledgebase/Article/View/978/108/organization-validation-sha-2
                (direct link)

                Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

                Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

                M 1 Reply Last reply Jan 9, 2020, 4:12 PM Reply Quote 0
                • M
                  Malte Will @Sebastian Roth
                  last edited by Malte Will Jan 9, 2020, 10:33 AM Jan 9, 2020, 4:12 PM

                  @Sebastian-Roth
                  I solved the problem. In the end, the last thing i forgot was to change the ip of the fog server to the fqdn in the ipxe file.
                  We also needed to set the WEB HOST setting in the FOG Configuration to the FQDN.
                  I checked the certificates you send with the ones we have and verified that they are identical.

                  Thanks for your help!

                  S 1 Reply Last reply Aug 4, 2020, 2:47 PM Reply Quote 1
                  • S
                    symrex @Malte Will
                    last edited by symrex Aug 4, 2020, 8:48 AM Aug 4, 2020, 2:47 PM

                    @Malte-Will said in Setting up trusted SSL certificate:

                    @Sebastian-Roth
                    I solved the problem. In the end, the last thing i forgot was to change the ip of the fog server to the fqdn in the ipxe file.

                    Could you please explain in more detail, which ipxe file do you mean?
                    /opt/fog/.fogsettings first line?
                    ipaddress=…

                    We also needed to set the WEB HOST setting in the FOG Configuration to the FQDN.

                    Done.

                    My problem is that after my CA was changed and ipxe was rebuild; iPXE still trying to connect to the bare IP not to the FQDN.

                    1 Reply Last reply Reply Quote 0
                    • C
                      cul3r0 @Sebastian Roth
                      last edited by Dec 10, 2021, 8:54 PM

                      @sebastian-roth said in Setting up trusted SSL certificate:

                      One more thing I missed to tell you. In case you want to use the fog-client software as well you will run into issues with your custom certificate. If you need to know more about this, I can give you the details.

                      i’d love to know more details about this. Thank you.

                      1 Reply Last reply Reply Quote 0
                      • T Tom Elliott referenced this topic on Jan 22, 2025, 2:45 PM
                      • 1 / 1
                      • First post
                        Last post

                      156

                      Online

                      12.0k

                      Users

                      17.3k

                      Topics

                      155.2k

                      Posts
                      Copyright © 2012-2024 FOG Project