@Tom-Elliott Thanks for the reply. Do you mean to take the public cert and add it to all my clients certificate store? That would be a process but possibly doable.
Though we are not using a self signed cert. We are using the ones FOG creates upon installation.
Hey,
I am currently unable to deploy snapins to my clients. This is the error I get on the client:
------------------------------------------------------------------------------
---------------------------------SnapinClient---------------------------------
------------------------------------------------------------------------------
5/19/2023 2:40:12 PM Client-Info Client Version: 0.13.0
5/19/2023 2:40:12 PM Client-Info Client OS: Windows
5/19/2023 2:40:12 PM Client-Info Server Version: 1.5.10
5/19/2023 2:40:12 PM Middleware::Response Success
5/19/2023 2:40:12 PM SnapinClient Running snapin <snapinname>
5/19/2023 2:40:12 PM Middleware::Communication Download: https://x.x.x.2//fog/service/snapins.file.php?mac=B0:0C:D1:6B:46:C1&taskid=901
5/19/2023 2:40:12 PM Data::RSA ERROR: Certificate validation failed
5/19/2023 2:40:12 PM Data::RSA ERROR: Trust chain did not complete to the known authority anchor. Errors: The signature of the certificate cannot be verified. (NotSignatureValid)
5/19/2023 2:40:12 PM Middleware::Communication SSL certificate chain error: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
5/19/2023 2:40:12 PM Middleware::Communication ERROR: Could not download file
5/19/2023 2:40:12 PM Middleware::Communication ERROR: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
5/19/2023 2:40:12 PM SnapinClient C:\Program Files (x86)\FOG\tmp\snapinname.exe
5/19/2023 2:40:12 PM Middleware::Communication URL: https://x.x.x.2/fog/service/snapins.checkin.php?taskid=901&exitcode=-1&mac=B0:0C:D1:6B:46:C1&newService&json
------------------------------------------------------------------------------
The server is Ubuntu 22.04. Fog version is 1.5.10.
I have 2 servers. fog server (x.x.x.1) and a storage node (x.x.x.2). The snapin is being deploy from the storage node (x.x.x.2)
I have reinstalled fog and recreated the keys and CA on both servers, which didn’t do anything.
I’m not sure if this will help but the certs match on both servers:
user@x.x.x.1:~$ openssl rsa -noout -modulus -in /opt/fog/snapins/ssl/.srvprivate.key | openssl md5
MD5(stdin)= 95e3734643ded6f39dxa34sac2767508
user@x.x.x.1:~$ openssl x509 -noout -modulus -in /var/www/fog/management/other/ssl/srvpublic.crt | openssl md5
MD5(stdin)= 95e3734643ded6f39dxa34sac2767508
user@x.x.x.2:~$ openssl rsa -noout -modulus -in /opt/fog/snapins/ssl/.srvprivate.key | openssl md5
MD5(stdin)= 95e3734643ded6f39dxa34sac2767508
user@x.x.x.2:~$ openssl x509 -noout -modulus -in /var/www/fog/management/other/ssl/srvpublic.crt | openssl md5
MD5(stdin)= 95e3734643ded6f39dxa34sac2767508
I’m not really sure where to go from here.