Re: [Astlinux-users] CA Problem in Astlinux

[Michael K. <mic...@ip...>]

Doh. I missed that!

Regards
Michael Knill

On 7/7/20, 5:56 pm, "Michael Keuter" <li...@mk...> wrote:

    Hi Michael,

    in my example on the Wiki I also had to use:

    --cacert "/usr/lib/ssl/cert.pem"

    > Am 07.07.2020 um 09:16 schrieb Michael Knill <mic...@ip...>:
    > 
    > Hi Lonnie
    > 
    > Looks like I have fixed the problem by using the --cacert option and using my wildcard CA Cert file.
    > Thanks for your help.
    > 
    > Regards
    > Michael Knill
    > 
    > On 7/7/20, 10:56 am, "Lonnie Abelbeck" <li...@lo...> wrote:
    > 
    >    Michael,
    > 
    >    I tested with "curl -LI https://asia.queuemetrics-live.com/" and the certificate is valid to the base URL.
    > 
    >    Does the QueueMetrics have it's own network SSL stack and ca-certificates database ?  If so, possibly their ca-certificates is out of date.  AstLinux's ca-certificates work.
    > 
    >    I looked at the QueueMetrics uniloader, it appears to be java based, which would have its own SSL stack and ca-certificates.
    > 
    >    I would talk to the QueueMetrics folks.  Maybe there is an update.
    > 
    >    Lonnie
    > 
    > 
    >> On Jul 6, 2020, at 7:39 PM, Michael Knill <mic...@ip...> wrote:
    >> 
    >> Hi Group
    >> 
    >> I'm connecting QueueMetrics Live to an Astlinux box and I'm getting the following error from uniloader:
    >> 2020/07/07 10:35:23 Errors in HTTP: [Post https://asia.queuemetrics-live.com/detlevs-au/jsonQLoaderApi.do: x509: certificate signed by unknown authority]
    >> 2020/07/07 10:35:23 [https://asia.queuemetrics-live.com/detlevs-au] Driver error: retrying in 400 ms
    >> 2020/07/07 10:35:23 Errors in HTTP: [Post https://asia.queuemetrics-live.com/detlevs-au/jsonQLoaderApi.do: x509: certificate signed by unknown authority]
    >> 2020/07/07 10:35:23 [https://asia.queuemetrics-live.com/detlevs-au] Driver error: retrying in 2000 ms
    >> 
    >> It works fine when I use HTTP.
    >> 
    >> Is there any way to fix this problem as I would much rather use HTTPS?
    >> 
    >> Regards
    >> Michael Knill
    >> _______________________________________________
    >> Astlinux-users mailing list
    >> Ast...@li...
    >> https://lists.sourceforge.net/lists/listinfo/astlinux-users
    >> 
    >> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
    > 
    > 
    > 
    >    _______________________________________________
    >    Astlinux-users mailing list
    >    Ast...@li...
    >    https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    >    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....
    > 
    > 
    > _______________________________________________
    > Astlinux-users mailing list
    > Ast...@li...
    > https://lists.sourceforge.net/lists/listinfo/astlinux-users
    > 
    > Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....


    Michael

    http://www.mksolutions.info





    _______________________________________________
    Astlinux-users mailing list
    Ast...@li...
    https://lists.sourceforge.net/lists/listinfo/astlinux-users

    Donations to support AstLinux are graciously accepted via PayPal to pa...@kr....