Invalid Host Certificate error Client Trunk 7348

[fry_p]

Hello again,
Forgive me if I am ignorant on the subject, as this is my first time using the new Fog Client as well as making a Windows 10 image. I am getting an error on the Client that prevents any services (particularly the Hostname Changer) from working.

 4/27/2016 1:30 PM Middleware::Communication URL: http://10.1.106.169/fog/management/other/ssl/srvpublic.crt
 4/27/2016 1:30 PM Data::RSA FOG Server CA cert found
 4/27/2016 1:30 PM Middleware::Authentication Cert OK
 4/27/2016 1:30 PM Middleware::Communication POST URL: http://10.1.106.169/fog/management/index.php?sub=authorize
 4/27/2016 1:30 PM Middleware::Communication Response: Success
 4/27/2016 1:30 PM Middleware::Authentication Authenticated
 4/27/2016 1:30 PM Middleware::Communication URL: http://10.1.106.169/fog/service/jobs.php?mac=9A:5F:D3:46:FA:8B|58:82:A8:8B:1D:D1|98:5F:D3:46:FB:8A|98:5F:D3:46:FB:8B||00:00:00:00:00:00:00:E0&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1&newService=1
 4/27/2016 1:30 PM Middleware::Communication Response: Invalid host certificate 

(I apologize for the long length of the log, just wanted to show everything)
I don’t know what the specific Client version is, but I downloaded it from the latest trunk install. It is a Windows 10 Education OS on a Surface Pro 4, imaged using a Microsoft Model 1663 Ethernet to USB adapter.

Thanks for your help!
Paul

[kpeterson]

Same thing here on Windows 7 and current trunk version I can go through the web browser to http://fog-server/fog/management/other/ssl/srvpublic.crt and it displays the certificate but I noticed in apache error_log the following

[client 192.168.6.106:64285] client denied by server configuration: /var/www/html/fog/management/other/ssl/srvpublic.crt

The entry in the apache log file is the fog client trying to view the certificate, I made a post about this yesterday but haven’t heard anything back yet.

[fry_p]

Update: I just Tried to reinstall using the --recreate-keys to no avail. I’m afraid to use the other argument "–recreate-ca because of the big bold waning on the wiki saying it will break the connection to all of the clients. Is this only true for the new clients, or both the new and the legacy? If it’s just the new one that is affected, I think I’d be OK doing the CA recreate.

[Tom Elliott]

Just pushed fix. Sorry I’m an idiot.

[kpeterson]

@Tom-Elliott Just tested it and its working fine again now. Thanks!