How to install SSL certificate in opsi?

mathew
Beiträge: 2
Registriert: 22 Jan 2018, 08:32

How to install SSL certificate in opsi?

Beitragvon mathew » 22 Jan 2018, 09:20

Hi everyone,

I have a problem about SSL certificate.

OS: debian 9.3 in hyper-V
computer name : abc.domain.com
public ip address : abc.domain.com

I already have a wildcard SSL certificates by another IIS web server and verifyed by COMODO.
When I install opsi by installation manual, In the step

Code: Alles auswählen

# aptitude install opsi-configed

I need enter the self-signed SSL content.

http://download.uib.de/opsi_stable/doc/ ... ble-en.pdf
page.18


The IIS SSL is .pfx, so I use openssl to get server.key, server.pem and ca.crt.
private key = server.key
server key = server.pem
comodo ca = ca.crt

There are default SSL file path in /etc/opsi/opsiconfd.conf

Code: Alles auswählen

[service]
ssl server cert = /etc/opsi/opsiconfd.pem
ssl server key = /etc/opsi/opsiconfd.pem


I type opsi url https://(server_internal_IP):4447/
then browser show "Your connection is not secure" because I know the ssl is self-signed.

I type opsi url https://abc.domain.com:4447/
"Your connection is not secure".

Then I change the default ssl and restart opsiconfd.

Code: Alles auswählen

[service]
ssl server cert = /etc/opsi/server.pem
ssl server key = /etc/opsi/server.key

Code: Alles auswählen

#service opsiconfd restart


I type opsi url https://abc.domain.com:4447/
Browser show" Unable to connect".

https://(server_internal_IP):4447/
Browser show "Unable to connect".

Does anyone know how to install ssl in opsi currently?

Benutzeravatar
wolfbardo
uib-Team
Beiträge: 1149
Registriert: 01 Jul 2008, 12:10

Re: How to install SSL certificate in opsi?

Beitragvon wolfbardo » 22 Jan 2018, 19:43

mmh, is after the restart the opsiconfd really running?

Have a look at

Code: Alles auswählen

/var/log/opsi/opsiconfd.log


perhaps you have to increase the loglevel of the opsiconfd

regards,
Bardo Wolf


!!! ANMELDEN !!! opsi-Konferenz in Mainz am 02. / 03. März 2020 https://opsiconf.org

opsi workshops

https://uib.de/de/support-schulung/schulung/

Basis
9.-12.12.2019
3.-6.2.2020
23.-26.3.2020


opsi support by uib gmbh

http://www.uib.de

mathew
Beiträge: 2
Registriert: 22 Jan 2018, 08:32

Re: How to install SSL certificate in opsi?

Beitragvon mathew » 23 Jan 2018, 02:34

Code: Alles auswählen

# ls -a /var/log/opsi/
.  bootimage      instlog     .opsiconfd.log.swo userlogin
.. clientconnect  opsiconfd   opsipxeconfd.log


Both .opsiconfd.log.swo and opsiconfd files are empty.
The opsiconfd is not restart currently?

Code: Alles auswählen

# service --status-all
[ - ] opsi-atftpd
[ + ] opsiconfd
[ + ] opsipxeconfd

Benutzeravatar
wolfbardo
uib-Team
Beiträge: 1149
Registriert: 01 Jul 2008, 12:10

Re: How to install SSL certificate in opsi?

Beitragvon wolfbardo » 23 Jan 2018, 08:50

sorry for the typo:

the opsiconfd.log is in

Code: Alles auswählen

/var/log/opsi/opsiconfd/opsiconfd.log


regards,

Bardo Wolf


!!! ANMELDEN !!! opsi-Konferenz in Mainz am 02. / 03. März 2020 https://opsiconf.org

opsi workshops

https://uib.de/de/support-schulung/schulung/

Basis
9.-12.12.2019
3.-6.2.2020
23.-26.3.2020


opsi support by uib gmbh

http://www.uib.de