Posts made by Silv4n

@Sebastian-Roth https://imgur.com/a/j0WJInw

@Sebastian-Roth unfortunatly the can’t display all of it: https://imgur.com/a/OKdQzwh

@Sebastian-Roth That’s the storage node

@Sebastian-Roth

fogadmin@v-fogsrv02:~$ openssl x509 -noout -fingerprint -sha1 -in /var/www/html/fog/management/other/ssl/srvpublic.crt
SHA1 Fingerprint=83:7B:9D:57:E9:11:51:83:46:20:7F:81:04:A2:23:44:A7:68:34:93
fogadmin@v-fogsrv02:~$ echo -n | openssl s_client -CAfile /var/www/html/fog/management/other/ca.cert.pem -connect 10.144.1.22:443 | head
depth=1 CN = FOG Server CA
verify return:1
depth=0 CN = 10.144.1.22
verify return:1
DONE
CONNECTED(00000005)
---
Certificate chain
 0 s:CN = 10.144.1.22
   i:CN = FOG Server CA
 1 s:CN = FOG Server CA
   i:CN = FOG Server CA
---
Server certificate
-----BEGIN CERTIFICATE-----

fogadmin@v-fogsrv02:~$ echo -n | openssl s_client -CAfile /var/www/html/fog/management/other/ca.cert.pem -connect 10.144.1.22:443 | openssl x509  -noout -fingerprint
depth=1 CN = FOG Server CA
verify return:1
depth=0 CN = 10.144.1.22
verify return:1
DONE
SHA1 Fingerprint=83:7B:9D:57:E9:11:51:83:46:20:7F:81:04:A2:23:44:A7:68:34:93

@Sebastian-Roth
Command 1:

drwxr-xr-x  6 fogproject root    4096 Feb 20 11:34 .
drwxr-xr-x 26 root       root    4096 Feb 21 11:01 ..
drwxr-xr-x  4 fogproject root    4096 Feb 20 11:34 10secdelay
drwxr-xr-x  2 fogproject root    4096 Feb 21 08:23 arm64-efi
-rw-r-xr-x  1 fogproject root     868 Feb 21 11:02 boot.txt
-rw-r-xr-x  1 fogproject root     457 Feb 21 11:02 default.ipxe
drwxr-xr-x  2 fogproject root    4096 Feb 20 11:34 i386-efi
-rw-r-xr-x  1 fogproject root  227424 Feb 21 11:02 intel.efi
-rw-r-xr-x  1 fogproject root   99123 Feb 21 11:02 intel.kkpxe
-rw-r-xr-x  1 fogproject root   99171 Feb 21 11:02 intel.kpxe
-rw-r-xr-x  1 fogproject root   99146 Feb 21 11:02 intel.pxe
-rw-r-xr-x  1 fogproject root 1007360 Feb 21 11:02 ipxe.efi
-rw-r-xr-x  1 fogproject root  876544 Feb 21 11:02 ipxe.iso
-rw-r-xr-x  1 fogproject root  358066 Feb 21 11:02 ipxe.kkpxe
-rw-r-xr-x  1 fogproject root  358114 Feb 21 11:02 ipxe.kpxe
-rw-r-xr-x  1 fogproject root  357700 Feb 21 11:02 ipxe.krn
-rw-r-xr-x  1 fogproject root  357700 Feb 21 11:02 ipxe.lkrn
-rw-r-xr-x  1 fogproject root  358328 Feb 21 11:02 ipxe.pxe
-rw-r-xr-x  1 fogproject root 1409024 Feb 21 11:02 ipxe.usb
-rw-r-xr-x  1 fogproject root  123448 Feb 20 13:24 ldlinux.c32
-rw-r-xr-x  1 fogproject root  187820 Feb 20 13:24 libcom32.c32
-rw-r-xr-x  1 fogproject root   26468 Feb 20 13:24 libutil.c32
-rw-r-xr-x  1 fogproject root   26140 Feb 21 11:02 memdisk
-rw-r-xr-x  1 fogproject root   29208 Feb 20 13:24 menu.c32
-rw-r-xr-x  1 fogproject root  252768 Feb 21 11:02 ncm--ecm--axge.efi
-rw-r-xr-x  1 fogproject root   43210 Feb 20 13:24 pxelinux.0.old
drwxr-xr-x  2 fogproject root    4096 Feb 18 08:17 pxelinux.cfg
-rw-r-xr-x  1 fogproject root  226272 Feb 21 11:02 realtek.efi
-rw-r-xr-x  1 fogproject root   99950 Feb 21 11:02 realtek.kkpxe
-rw-r-xr-x  1 fogproject root   99998 Feb 21 11:02 realtek.kpxe
-rw-r-xr-x  1 fogproject root   99968 Feb 21 11:02 realtek.pxe
-rw-r-xr-x  1 fogproject root  225696 Feb 21 11:02 snp.efi
-rw-r-xr-x  1 fogproject root  225952 Feb 21 11:02 snponly.efi
-rw-r-xr-x  1 fogproject root   98645 Feb 21 11:02 undionly.kkpxe
-rw-r-xr-x  1 fogproject root   98693 Feb 21 11:02 undionly.kpxe
-rw-r-xr-x  1 fogproject root   98696 Feb 21 11:02 undionly.pxe
-rw-r-xr-x  1 fogproject root   29728 Feb 20 13:24 vesamenu.c32

Command 2:

SHA1 Fingerprint=52:79:6A:2A:DB:DB:B2:97:93:0E:81:45:84:1B:92:D8:BB:6D:2B:6F

Command 3:

SHA1 Fingerprint=52:79:6A:2A:DB:DB:B2:97:93:0E:81:45:84:1B:92:D8:BB:6D:2B:6F

@Sebastian-Roth
First command:

e15712aaee9359a90e94b46905018252  /opt/fog/snapins/ssl/CA/.fogCA.pem
e15712aaee9359a90e94b46905018252  /var/www/html/fog/management/other/ca.cert.pem

Second command:

(stdin)= e1dc65877f9a55eb8c01744cf987bb50

Third command:

(stdin)= e1dc65877f9a55eb8c01744cf987bb50

Fourth command:

/var/www/fog/management/other/ssl/srvpublic.crt: OK

@Sebastian-Roth Ok, I’m gonna try that afterwards, kinda in the middle of something.

@Sebastian-Roth No worries, there are no clients on the storage node, only on the master, but thanks for the info.

Error Logs: https://bit.ly/2vSpoBy

Hey guys,

This is an addition to the request https://forums.fogproject.org/topic/14230/pxe-boot-not-working-properly-from-storage-node, which was solved with 1.5.7.

I thought, that it would be good to just upgrade to 1.5.8, so that these things don’t happen again. However after upgrading both the master and storage, the PXE Boot fails yet again with the same error as yesterday. I’ve already tried --recreate-ca and --recreate-keys on the Storage Node.

Error & certstat:
https://imgur.com/a/OnJX221

Thanks for any help

@Sebastian-Roth Thanks to the both of you, it worked!

Proof: https://imgur.com/a/FiqaZNd

@Sebastian-Roth No problem, you’re helping me. With reinstall apache/php files or not?

@Sebastian-Roth https://imgur.com/a/YpoaNPz

@Sebastian-Roth Oh, and I can access the file from the browser

@Sebastian-Roth So I’ve generated the new certs etc. and now I have a new error message (Permission denied):
https://imgur.com/a/yK4TwNZ

@Sebastian-Roth Ok, in /tftpboot/default.ipxe there currently is chain https://10.144.1.22/fog/service/ipxe/boot.php##params, so there is already https. Im’m gonna try now the cert gen etc.

@george1421 Alright, I’ve copied over the

/opt/fog/snapins/ssl/.srvprivate.key

And the apache service started now and after a reinstall with HTTPS (which worked now without an issues) I can access the Web GUI of the Storage Node via HTTPS. It also generated a new boot file etc. However, the PXE Boot still throws the chainloading error, when trying to actually boot in to something. It also tries to connect there still with HTTP.

@george1421 Alright, I’m gonna test that tomorrow morning or tonight and than I’ll leave feedback here.

@george1421 Based on cookies i guess ;), for me it shows the screenshot, but im gonna copy it here instead:

[Wed Feb 19 15:43:44.859522 2020] [ssl:emerg] [pid 16345] AH02565: Certificate and private key 10.144.1.22:443:0 from /var/www/fog/management/other/ssl/srvpublic.crt and /opt/fog/snapins/ssl/.srvprivate.key do not match

@george1421 I haven’t copied the certs over yet, because there were already certs on the server, but now this error appears in the apache log, I’m not sure if copying over solves that:
http://prntscr.com/r4nmiu