<![CDATA[1.6 Migration via new Install with no DB Transfer]]>I just did a massive overhaul on our fog service, migrating directly into 1.6 by running a new server from scratch rather than a database migration (there were some Foreign Key check failures on the in-place upgrade), and for the most part everything seems to be working except reliable agent communication. Both on the old and new agent I’m having a bitch of a time with the CA communication.

When using the new agent from the GitHub, I get a 503 error, so referencing the apache error logs gives me a bit of insight:
Got error 'PHP message: FOG agent enroll: signing for host 387 from 10.1.60.40 failed: the issued certificate does not verify against /opt/fog/snapins/ssl/CA/.fogCA.pem'

In this instance, this was a fresh agent install, so I’m not sure what cert is being compared to what. I’m assuming until told otherwise that my FOG Generated PKI is foobar for production use, but I’m unsure of the steps to even take in this instance.

]]>http://forums.fogproject.org/topic/18259/1-6-migration-via-new-install-with-no-db-transferRSS for NodeThu, 01 Oct 2026 23:06:56 GMTThu, 01 Oct 2026 21:02:55 GMT60