Private key failed

[Raymond Bell]

@Jbob Updating now to r5136 and will see what happens

[Raymond Bell]

@Tom-Elliott @Jbob Update trunk to r5136 and still getting same error

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/29/2016 7:45 AM Client-Info Version: 0.9.11
 3/29/2016 7:45 AM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/29/2016 7:45 AM Data::RSA FOG Server CA cert found
 3/29/2016 7:45 AM Middleware::Authentication Cert OK
 3/29/2016 7:45 AM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/29/2016 7:47 AM Bus Became bus server
 3/29/2016 7:47 AM Bus {
  "channel": "Status",
  "data": "{\r\n  \"action\": \"load\"\r\n}"
}
 3/29/2016 7:47 AM Bus Emmiting message on channel: Status

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/29/2016 7:47 AM Client-Info Version: 0.9.11
 3/29/2016 7:47 AM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/29/2016 7:47 AM Data::RSA FOG Server CA cert found
 3/29/2016 7:47 AM Middleware::Authentication Cert OK
 3/29/2016 7:47 AM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/29/2016 7:48 AM Middleware::Communication Unknown Response: Private key not found
 3/29/2016 7:48 AM Service Sleeping for 120 seconds

And the key is there

fog@fog-virtual-machine14:/opt/fog/snapins/ssl$ ls
CA  fog.csr
fog@fog-virtual-machine14:/opt/fog/snapins/ssl$ ls .?*
.srvprivate.key

..:
ssl
fog@fog-virtual-machine14:/opt/fog/snapins/ssl$

[Wayne Workman]

@Raymond-Bell These are the files you should have. Check the permissions too.

[Raymond Bell]

@Wayne-Workman

[Wayne Workman]

@Raymond-Bell Have you tried resetting the encryption on this particular host? It’s done in the web UI under the host’s general area.

[Raymond Bell]

@Wayne-Workman
Yes, But i had to add it to a group by its self first to get the Reset Option

[Wayne Workman]

@Raymond-Bell There is a manual method for resetting the encryption on all hosts here: https://wiki.fogproject.org/wiki/index.php?title=FOG_Client

This method would also work on an individual host but you’d need to modify the SQL appropriately with a WHERE clause.

[Raymond Bell]

@Wayne-Workman So you are saying stop apache2 and try running this and see what happens?

Manually reset encryption on ALL hosts

This applies to FOG 1.3.0 where the New Client is in use and for some reason you need to manually reset the encryption for all hosts.

mysql
use fog
UPDATE hosts SET hostPubKey=“”, hostSecToken=“”, hostSecTime=“0000-00-00 00:00:00”;

[Wayne Workman]

@Raymond-Bell You don’t have to stop apache for this, and this is just to make sure the encryption on this particular host is reset.

[Raymond Bell]

@Wayne-Workman Ok so just run the

mysql
use fog
UPDATE hosts SET hostPubKey="", hostSecToken="", hostSecTime="0000-00-00 00:00:00";

[Raymond Bell]

@Wayne-Workman How do i find just this host hostPubKey so i don’t do this on all

[Wayne Workman]

@Raymond-Bell use a WHERE clause for the hostname. WHERE hostName = ‘someHostName’

[Raymond Bell]

@Wayne-Workman Like this ?

 UPDATE WHERE hostName = "LAB-IMAGE-WIN10" SET hostPubKey="", hostSecToken="", hostSecTime="0000-00-00 00:00:00";

[Wayne Workman]

@Raymond-Bell Well I normally put the WHERE clause at the very end… but that will either work or give an error. Try it.

[Raymond Bell]

@Wayne-Workman Done

mysql> UPDATE hosts SET hostPubKey="", hostSecToken="", hostSecTime="0000-00-00 00:00:00"; WHERE hostName = "LAB-IMAGE-WIN10"
Query OK, 4 rows affected (0.04 sec)
Rows matched: 804  Changed: 4  Warnings: 0

[Wayne Workman]

@Raymond-Bell said:

Query OK, 4 rows affected (0.04 sec)

4 rows affected?

Can you run this command and see what the return is?

SELECT hostID,hostName FROM hosts WHERE hostName = 'LAB-IMAGE-WIN10';

[Raymond Bell]

@Wayne-Workman

mysql> SELECT hostName,hostID from hosts where hostName = 'LAB-IMAGE-WIN10';
+-----------------+--------+
| hostName        | hostID |
+-----------------+--------+
| LAB-IMAGE-WIN10 |   1701 |
+-----------------+--------+
1 row in set (0.08 sec)

mysql>

[Wayne Workman]

@Raymond-Bell Well what does the host’s fog log say now?

[Raymond Bell]

@Wayne-Workman

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/29/2016 9:28 AM Client-Info Version: 0.9.12
 3/29/2016 9:28 AM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/29/2016 9:28 AM Data::RSA FOG Server CA cert found
 3/29/2016 9:28 AM Middleware::Authentication Cert OK
 3/29/2016 9:28 AM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/29/2016 9:28 AM Middleware::Communication Unknown Response: Private key not found
 3/29/2016 9:28 AM Service Sleeping for 120 seconds

------------------------------------------------------------------------------
--------------------------------Authentication--------------------------------
------------------------------------------------------------------------------
 3/29/2016 9:30 AM Client-Info Version: 0.9.12
 3/29/2016 9:30 AM Middleware::Communication URL: http://10.24.28.18/fog/management/other/ssl/srvpublic.crt
 3/29/2016 9:31 AM Data::RSA FOG Server CA cert found
 3/29/2016 9:31 AM Middleware::Authentication Cert OK
 3/29/2016 9:31 AM Middleware::Communication POST URL: http://10.24.28.18/fog/management/index.php?sub=authorize
 3/29/2016 9:31 AM Middleware::Communication Unknown Response: Private key not found
 3/29/2016 9:31 AM Service Sleeping for 120 seconds```

[Wayne Workman]

@Raymond-Bell Is this with just this one host or is it all hosts?