From: Lonnie A. <li...@lo...> - 2020-07-07 11:32:41
|
Michael (AU), As the other Michael mentioned, the "/usr/lib/ssl/cert.pem" contains the constantly updated ca-certificates on AstLinux, which would be better than you having to install you own cert file on every system. Lonnie > On Jul 7, 2020, at 2:56 AM, Michael Keuter <li...@mk...> wrote: > > Hi Michael, > > in my example on the Wiki I also had to use: > > --cacert "/usr/lib/ssl/cert.pem" > >> Am 07.07.2020 um 09:16 schrieb Michael Knill <mic...@ip...>: >> >> Hi Lonnie >> >> Looks like I have fixed the problem by using the --cacert option and using my wildcard CA Cert file. >> Thanks for your help. >> >> Regards >> Michael Knill >> >> On 7/7/20, 10:56 am, "Lonnie Abelbeck" <li...@lo...> wrote: >> >> Michael, >> >> I tested with "curl -LI https://asia.queuemetrics-live.com/" and the certificate is valid to the base URL. >> >> Does the QueueMetrics have it's own network SSL stack and ca-certificates database ? If so, possibly their ca-certificates is out of date. AstLinux's ca-certificates work. >> >> I looked at the QueueMetrics uniloader, it appears to be java based, which would have its own SSL stack and ca-certificates. >> >> I would talk to the QueueMetrics folks. Maybe there is an update. >> >> Lonnie >> >> >>> On Jul 6, 2020, at 7:39 PM, Michael Knill <mic...@ip...> wrote: >>> >>> Hi Group >>> >>> I'm connecting QueueMetrics Live to an Astlinux box and I'm getting the following error from uniloader: >>> 2020/07/07 10:35:23 Errors in HTTP: [Post https://asia.queuemetrics-live.com/detlevs-au/jsonQLoaderApi.do: x509: certificate signed by unknown authority] >>> 2020/07/07 10:35:23 [https://asia.queuemetrics-live.com/detlevs-au] Driver error: retrying in 400 ms >>> 2020/07/07 10:35:23 Errors in HTTP: [Post https://asia.queuemetrics-live.com/detlevs-au/jsonQLoaderApi.do: x509: certificate signed by unknown authority] >>> 2020/07/07 10:35:23 [https://asia.queuemetrics-live.com/detlevs-au] Driver error: retrying in 2000 ms >>> >>> It works fine when I use HTTP. >>> >>> Is there any way to fix this problem as I would much rather use HTTPS? >>> >>> Regards >>> Michael Knill >>> _______________________________________________ >>> Astlinux-users mailing list >>> Ast...@li... >>> https://lists.sourceforge.net/lists/listinfo/astlinux-users >>> >>> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr.... >> >> >> >> _______________________________________________ >> Astlinux-users mailing list >> Ast...@li... >> https://lists.sourceforge.net/lists/listinfo/astlinux-users >> >> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr.... >> >> >> _______________________________________________ >> Astlinux-users mailing list >> Ast...@li... >> https://lists.sourceforge.net/lists/listinfo/astlinux-users >> >> Donations to support AstLinux are graciously accepted via PayPal to pa...@kr.... > > > Michael > > http://www.mksolutions.info > > > > > > _______________________________________________ > Astlinux-users mailing list > Ast...@li... > https://lists.sourceforge.net/lists/listinfo/astlinux-users > > Donations to support AstLinux are graciously accepted via PayPal to pa...@kr.... |