Cannot install a CA Certificate

Trev-lchs

Hi All having upgraded fog to Ver 1.5.9 from version 1.5.4, trying install the smart installer for client Version 0.12.0 over client Version 0.11.16, it uninstalled the old client but then failed to install the new one with the error unable to install CA certificate. Thing is, the previous version of the client was working fine on 1.5.9, communication was all good… I should of stayed to my mantra of “if it isn’t broke don’t fix it”. Any help gratefully received.

Trev-lchs

@trev-lchs what I have done for now is kept using the old client (0.11.16) on the image i had in fog, this works perfectly. But if anyone knows what the fix is for the “Cannot install a CA Cert” that i have with client ver 0.12.0, that would be really very useful.

Sebastian Roth

@Trev-lchs said:

But if anyone knows what the fix is for the “Cannot install a CA Cert” that i have with client ver 0.12.0, that would be really very useful.

Possibly fixed in 0.12.1: https://github.com/FOGProject/fog-client/releases

Trev-lchs

@sebastian-roth Thanks Sebastian I will give it a go.

Trev-lchs

@trev-lchs Sorry Sebastian, same issue with the latest one.

Trev-lchs

@sebastian-roth OK I am just very stupid, My apologies everyone. However. this might be a great opportunity to help others. Please when installing the client, in the box that says Fog Server, make sure you clear the box (the word FogServer) and enter the IP of your Fog Server then click next. The easy thing to do is just click next on the install, that’s when you get the CA error as it has no idea where the fog server is.

rubix8

During the installation of the client, there is a part where it asks the name of the server. Type the IP address instead.

At least that worked for me.

fabiano.matos

@trev-lchs

Hello folks
I’m still having the same problem.

FOG Server 1.5.9
Clients 0.12.2 and 0.11.16 give the same error “Unable to install CA certificate”

Any ideas how to solve this?

Trev-lchs

@fabiano-matos this is what worked for us buddy::

OK I am just very stupid, My apologies everyone. However. this might be a great opportunity to help others. Please when installing the client, in the box that says Fog Server, make sure you clear the box (the word FogServer) and enter the IP of your Fog Server then click next. The easy thing to do is just click next on the install, that’s when you get the CA error as it has no idea where the fog server is.

fabiano.matos

@trev-lchs thanks trev
I did like you said. In the box fogserver I’ve tried my DNS and my IPV4 address. But still getting the same error.
That’s why I’m asking you all… Cause your solution does not work here.
But thanks for your interest and help;

Trev-lchs

@fabiano-matos can you ping the fog server from the client PC?

fabiano.matos

@trev-lchs Yes… ping FQDN (dns) and IP

rodluz

@fabiano-matos said in Cannot install a CA Certificate:

I did like you said. In the box fogserver I’ve tried my DNS and my IPV4 address. But still getting the same error.

Few questions:
Just making sure, when you say “my IPV4 address” you mean the FOG Server’s IP address right?

Was this a clean install of the FOG client on the computer or did you have an older version already installed?

Is your FOG server set up with HTTPS? If so, are you checking the Use HTTPS to connect to FOG server box?

fabiano.matos

@rodluz

Just making sure, when you say “my IPV4 address” you mean the FOG Server’s IP address right?

Yes, I’ve tried with ip of the server and with dns like ‘fog.sub.domain.com’. My pc client can ping server via IP ou DNS.

Was this a clean install of the FOG client on the computer or did you have an older version already installed?

Yes, this is a computuer clean, when never installed any version of FOGClient.

Is your FOG server set up with HTTPS? If so, are you checking the Use HTTPS to connect to FOG server box?

Yep. The server is running with both ports (80 and 443). Tried install client via https (checking use HTTPS box) and without this option (via http)

Checking my firewall, the packets are passing to the server.

Trev-lchs

@sebastian-roth HI Sebastian, do you think you could take a look at this thread and help Fabiano , I am out of ideas.

Sebastian Roth

@fabiano-matos said in Cannot install a CA Certificate:

Unable to install CA certificate

@Trev-lchs Hmm, do you have GPOs applied that might prevent from certificate being installed? https://forums.fogproject.org/post/131875

Or anti virus tools can cause this as well: https://forums.fogproject.org/post/88558

As well you might check the log file found in C:\Windows\Temp\FOGService.install.log to see more information on why it fails.

fabiano.matos

@sebastian-roth Thanks for this tip. I didn’t known the location of this log.

Looking at this file I found the problem: My server doesn’t have/created a ca.cert.

 22/11/2022 15:24:38 Middleware::Communication Download: https://mydomain/fog/management/other/ca.cert.der
 22/11/2022 15:24:39 Middleware::Communication ERROR: Could not download file
 22/11/2022 15:24:39 Middleware::Communication ERROR: O servidor remoto retornou um erro: (404) Não Localizado.
 22/11/2022 15:24:39 Installer Could not download server CA cert from FOG server
 22/11/2022 15:24:40 Installer ERROR: Unable to install CA certificate

After reinstall server (making sure CA was create), the problem was solved. Now FOGClient installation was completed without errors.

Thank you all @Sebastian-Roth @Trev-lchs @rodluz for the help

I’m having another problem now, but I think its best to use another topic for this.

Sebastian Roth

@fabiano-matos said in Cannot install a CA Certificate:

I didn’t known the location of this log.

You are welcome. This was missing in our documentation (like many other things). I just updated the docs: https://docs.fogproject.org/en/latest/getting_started/install_fog_client.html#installer-issue

Trev-lchs

@sebastian-roth Thanks Sebastian, great that its all good now and another great bit of info on here…

Cannot install a CA Certificate

161

12.0k

17.3k

155.2k