Re: can't get rhn_register (and therefore client s) working
Ryan Speed <[email protected]>
| Newsgroups | gmane.network.up2date.current.devel |
|---|---|
| Organization | datawave.ca |
| Message-ID | <[email protected]> |
Ok, I just changed my configs (rhn_register/up2date) to the fqdn, and re-generated the key on the server to also use the fqdn as the identifier, copied the new key over to the client and confirmed that it is the matching key. fired up current and re-ran rhn_register, exactly the same problem, someone else suggested running openssl manually to attempt connecting to stunnel on the server, I will give that a shot now. Are there any requirements on what the permissions for any of the files must be? I did chattr +i RHNS-CA-CERT just to be sure that the file could not be overwritten and that did not work so I also attempted it with -i, still no dice. thanks, ryan On 25 Apr 2002 12:29:16 -0400 Hunter Matthews <[email protected]> wrote: > On Thu, 2002-04-25 at 12:15, Ryan Speed wrote: > > On Thu, 25 Apr 2002 09:15:52 +0200 > > [email protected] wrote: > > > > > Ryan, > > > > > > Please check the contents of the files /etc/sysconfig/rhn/rhn_register and > > > > http://speedo.ca/current/rhn_register > > Try a FQDN for your URL selections > serverURL=https://lada:8081/XMLRPC > > might not be a problem, but looks weird. Also this _MAY_ need to be > equal to whatever your server certificate signature is. > > IE, look at RHNS-CA-CERT. If that cert says lada.speedo.ca, then > lada.speedo.ca is what I would put in the config files. > > Based on the strace.log, my best GUESS is either the URL thing above > (the ssl library that stunnel uses can be MIGHTY picky) or a mismatch > between the clients RHNS-CA-CERT and the servers actual current.pem > file. > > Make absolutely CERTAIN that the clients RHNS-CA-CERT file is the one > you created when you installed the server, the second or third time or > whatever - cating it and the /etc/current/current.pem file should be > enough to tell. > > > > -- > Hunter Matthews Unix / Network Administrator > Office: BioScience 145/244 Duke Univ. Biology Department > Key: F0F88438 / FFB5 34C0 B350 99A4 BB02 9779 A5DB 8B09 F0F8 8438 > Never take candy from strangers. Especially on the internet. > > _______________________________________________ > Current-server mailing list > [email protected] > http://lists.dulug.duke.edu/mailman/listinfo/current-server