TLS Configuration with sudo

"sean.dolan--- via sudo-users" <[email protected]> Fri, 4 Aug 2023 12:46:11 +0000

Newsgroups	gmane.comp.tools.sudo.user
Message-ID	<SN5P110MB0671FBC3363174E9DA95AA1DE709A@SN5P110MB0671.NAMP110.PROD.OUTLOOK.COM>

RedHat 7.9, Sudo 1.9.13-1.   I'm having an issue with sudo (sudoers, sudo-logsrvd) TLS where I'm getting a generic "verification failed" error (e.g `sudo date`) when using TLS for log_servers (ie. sudo-logsrvd) in the sudoers file.
The machine that is running the sudo-logsrvd service has the following line in its journal : "tlsv1 alert unknown ca"    I think the message is the server trying to verify the client??

When I use openssl s_client to connect to the logsrvd TLS port, I get a self-signed cert error unless I include the -CAfile option, so I included a log_server_cabundle directive to the sudoers file to match, but that didn't seem to actually fix or change the error at all.

Am I missing something?
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users