certificate error while Adding Hosts in Icinga monitoring tool
Clash Royale CLAN TAG#URR8PPP
0
I am getting certificate error while Adding Hosts in Icinga ! I am not able to figure out the error but I have received proper keys and certificates from client !
sh -x /tmp/icinga-certsign.sh
+ cd /etc/icinga2
+ mkdir -p pki
+ chown icinga:icinga /etc/icinga2/pki
++ cat /etc/bashrc
++ grep -i '&& PS1'
++ cut -d@ -f2
++ awk 'print $1'
+ fqdn=xyz-host
++ icinga2 pki ticket --cn ''''xyz-host'''' --salt xxxx-xxx
+ ticket1=xxx-xxxx
+ icinga2 pki new-cert --cn xyz-host --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
+ icinga2 pki save-cert --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
information/cli: Writing trusted certificate to file '/etc/icinga2/pki/trusted-master.crt'.
+ icinga2 pki request --host icinga-master --port 5665 --ticket XXX_XXXX --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
+ chown icinga:icinga ca.crt
chown: cannot access `ca.crt': No such file or directory
+ icinga2 node setup --ticket XXXX_XXX --endpoint icinga-master --zone xyz-host --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn xyz-host --accept-commands --accept-config
information/cli: Verifying ticket 'XXXX-XXX'.
information/cli: Verifying master host connection information: host 'icinga-master', port '5665'.
information/cli: Verifying trusted certificate from file '/etc/icinga2/pki/trusted-master.crt'.
information/cli: Using the following CN (defaults to FQDN): 'xyz-host'.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.key.orig' already exists. Skipping backup.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.crt.orig' already exists. Skipping backup.
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
critical/cli: chown() failed with error code 2, "No such file or directory"
warning/cli: Cannot set ownership for user 'icinga' group 'icinga' on file '/etc/icinga2/pki/ca.crt'. Verify it yourself!
information/cli: Requesting a signed certificate from the master.
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
critical/cli: Failed to request certificate from Icinga 2 master.
Here is the script :
cat /tmp/icinga-certsign.sh
cd /etc/icinga2; mkdir -p pki ;chown icinga:icinga /etc/icinga2/pki
fqdn=$(cat /etc/bashrc | grep -i "&& PS1"| cut -d@ -f2| awk 'print $1')
ticket1=$(icinga2 pki ticket --cn '$fqdn' --salt xxx-xxxx)
icinga2 pki new-cert --cn $fqdn --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt
icinga2 pki save-cert --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
icinga2 pki request --host icinga-master --port 5665 --ticket $ticket1 --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
chown icinga:icinga ca.crt
icinga2 node setup --ticket $ticket1 --endpoint icinga-master --zone $fqdn --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn $fqdn --accept-commands --accept-config
shell-script monitoring certificates
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
add a comment |
0
I am getting certificate error while Adding Hosts in Icinga ! I am not able to figure out the error but I have received proper keys and certificates from client !
sh -x /tmp/icinga-certsign.sh
+ cd /etc/icinga2
+ mkdir -p pki
+ chown icinga:icinga /etc/icinga2/pki
++ cat /etc/bashrc
++ grep -i '&& PS1'
++ cut -d@ -f2
++ awk 'print $1'
+ fqdn=xyz-host
++ icinga2 pki ticket --cn ''''xyz-host'''' --salt xxxx-xxx
+ ticket1=xxx-xxxx
+ icinga2 pki new-cert --cn xyz-host --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
+ icinga2 pki save-cert --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
information/cli: Writing trusted certificate to file '/etc/icinga2/pki/trusted-master.crt'.
+ icinga2 pki request --host icinga-master --port 5665 --ticket XXX_XXXX --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
+ chown icinga:icinga ca.crt
chown: cannot access `ca.crt': No such file or directory
+ icinga2 node setup --ticket XXXX_XXX --endpoint icinga-master --zone xyz-host --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn xyz-host --accept-commands --accept-config
information/cli: Verifying ticket 'XXXX-XXX'.
information/cli: Verifying master host connection information: host 'icinga-master', port '5665'.
information/cli: Verifying trusted certificate from file '/etc/icinga2/pki/trusted-master.crt'.
information/cli: Using the following CN (defaults to FQDN): 'xyz-host'.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.key.orig' already exists. Skipping backup.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.crt.orig' already exists. Skipping backup.
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
critical/cli: chown() failed with error code 2, "No such file or directory"
warning/cli: Cannot set ownership for user 'icinga' group 'icinga' on file '/etc/icinga2/pki/ca.crt'. Verify it yourself!
information/cli: Requesting a signed certificate from the master.
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
critical/cli: Failed to request certificate from Icinga 2 master.
Here is the script :
cat /tmp/icinga-certsign.sh
cd /etc/icinga2; mkdir -p pki ;chown icinga:icinga /etc/icinga2/pki
fqdn=$(cat /etc/bashrc | grep -i "&& PS1"| cut -d@ -f2| awk 'print $1')
ticket1=$(icinga2 pki ticket --cn '$fqdn' --salt xxx-xxxx)
icinga2 pki new-cert --cn $fqdn --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt
icinga2 pki save-cert --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
icinga2 pki request --host icinga-master --port 5665 --ticket $ticket1 --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
chown icinga:icinga ca.crt
icinga2 node setup --ticket $ticket1 --endpoint icinga-master --zone $fqdn --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn $fqdn --accept-commands --accept-config
shell-script monitoring certificates
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
` Please check the master log (notice or debug)` Anything in master Icinga2 log file?
– 7171u
Dec 14 '15 at 14:50
I checked tailf /var/log/icinga2/icinga2.log there is no request from my ip also error.log is empty
– Ashish Karpe
Dec 14 '15 at 17:03
critical/cli: Failed to request certificate from Icinga 2 master.
– Ashish Karpe
Dec 14 '15 at 17:04
How do I confirm whether client and master are communicating something like check_nrpe -H nagios-server-ip
– Ashish Karpe
Dec 15 '15 at 10:29
Connection to master is not possible until the client has the certificate signed by CA. Try this: docs.icinga.org/icinga2/latest/doc/module/icinga2/toc#!/icinga2/…
– 7171u
Dec 15 '15 at 11:15
add a comment |
0
0
0
1
I am getting certificate error while Adding Hosts in Icinga ! I am not able to figure out the error but I have received proper keys and certificates from client !
sh -x /tmp/icinga-certsign.sh
+ cd /etc/icinga2
+ mkdir -p pki
+ chown icinga:icinga /etc/icinga2/pki
++ cat /etc/bashrc
++ grep -i '&& PS1'
++ cut -d@ -f2
++ awk 'print $1'
+ fqdn=xyz-host
++ icinga2 pki ticket --cn ''''xyz-host'''' --salt xxxx-xxx
+ ticket1=xxx-xxxx
+ icinga2 pki new-cert --cn xyz-host --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
+ icinga2 pki save-cert --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
information/cli: Writing trusted certificate to file '/etc/icinga2/pki/trusted-master.crt'.
+ icinga2 pki request --host icinga-master --port 5665 --ticket XXX_XXXX --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
+ chown icinga:icinga ca.crt
chown: cannot access `ca.crt': No such file or directory
+ icinga2 node setup --ticket XXXX_XXX --endpoint icinga-master --zone xyz-host --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn xyz-host --accept-commands --accept-config
information/cli: Verifying ticket 'XXXX-XXX'.
information/cli: Verifying master host connection information: host 'icinga-master', port '5665'.
information/cli: Verifying trusted certificate from file '/etc/icinga2/pki/trusted-master.crt'.
information/cli: Using the following CN (defaults to FQDN): 'xyz-host'.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.key.orig' already exists. Skipping backup.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.crt.orig' already exists. Skipping backup.
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
critical/cli: chown() failed with error code 2, "No such file or directory"
warning/cli: Cannot set ownership for user 'icinga' group 'icinga' on file '/etc/icinga2/pki/ca.crt'. Verify it yourself!
information/cli: Requesting a signed certificate from the master.
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
critical/cli: Failed to request certificate from Icinga 2 master.
Here is the script :
cat /tmp/icinga-certsign.sh
cd /etc/icinga2; mkdir -p pki ;chown icinga:icinga /etc/icinga2/pki
fqdn=$(cat /etc/bashrc | grep -i "&& PS1"| cut -d@ -f2| awk 'print $1')
ticket1=$(icinga2 pki ticket --cn '$fqdn' --salt xxx-xxxx)
icinga2 pki new-cert --cn $fqdn --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt
icinga2 pki save-cert --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
icinga2 pki request --host icinga-master --port 5665 --ticket $ticket1 --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
chown icinga:icinga ca.crt
icinga2 node setup --ticket $ticket1 --endpoint icinga-master --zone $fqdn --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn $fqdn --accept-commands --accept-config
shell-script monitoring certificates
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
I am getting certificate error while Adding Hosts in Icinga ! I am not able to figure out the error but I have received proper keys and certificates from client !
sh -x /tmp/icinga-certsign.sh
+ cd /etc/icinga2
+ mkdir -p pki
+ chown icinga:icinga /etc/icinga2/pki
++ cat /etc/bashrc
++ grep -i '&& PS1'
++ cut -d@ -f2
++ awk 'print $1'
+ fqdn=xyz-host
++ icinga2 pki ticket --cn ''''xyz-host'''' --salt xxxx-xxx
+ ticket1=xxx-xxxx
+ icinga2 pki new-cert --cn xyz-host --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
+ icinga2 pki save-cert --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
information/cli: Writing trusted certificate to file '/etc/icinga2/pki/trusted-master.crt'.
+ icinga2 pki request --host icinga-master --port 5665 --ticket XXX_XXXX --key /etc/icinga2/pki/xyz-host.key --cert /etc/icinga2/pki/xyz-host.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
+ chown icinga:icinga ca.crt
chown: cannot access `ca.crt': No such file or directory
+ icinga2 node setup --ticket XXXX_XXX --endpoint icinga-master --zone xyz-host --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn xyz-host --accept-commands --accept-config
information/cli: Verifying ticket 'XXXX-XXX'.
information/cli: Verifying master host connection information: host 'icinga-master', port '5665'.
information/cli: Verifying trusted certificate from file '/etc/icinga2/pki/trusted-master.crt'.
information/cli: Using the following CN (defaults to FQDN): 'xyz-host'.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.key.orig' already exists. Skipping backup.
warning/cli: Backup file '/etc/icinga2/pki/xyz-host.crt.orig' already exists. Skipping backup.
information/base: Writing private key to '/etc/icinga2/pki/xyz-host.key'.
information/base: Writing X509 certificate to '/etc/icinga2/pki/xyz-host.crt'.
critical/cli: chown() failed with error code 2, "No such file or directory"
warning/cli: Cannot set ownership for user 'icinga' group 'icinga' on file '/etc/icinga2/pki/ca.crt'. Verify it yourself!
information/cli: Requesting a signed certificate from the master.
critical/cli: Could not fetch valid response. Please check the master log (notice or debug).
critical/cli: Failed to request certificate from Icinga 2 master.
Here is the script :
cat /tmp/icinga-certsign.sh
cd /etc/icinga2; mkdir -p pki ;chown icinga:icinga /etc/icinga2/pki
fqdn=$(cat /etc/bashrc | grep -i "&& PS1"| cut -d@ -f2| awk 'print $1')
ticket1=$(icinga2 pki ticket --cn '$fqdn' --salt xxx-xxxx)
icinga2 pki new-cert --cn $fqdn --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt
icinga2 pki save-cert --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --host icinga-master
icinga2 pki request --host icinga-master --port 5665 --ticket $ticket1 --key /etc/icinga2/pki/$fqdn.key --cert /etc/icinga2/pki/$fqdn.crt --trustedcert /etc/icinga2/pki/trusted-master.crt --ca /etc/icinga2/pki/ca.crt
chown icinga:icinga ca.crt
icinga2 node setup --ticket $ticket1 --endpoint icinga-master --zone $fqdn --master_host icinga-master --trustedcert /etc/icinga2/pki/trusted-master.crt --cn $fqdn --accept-commands --accept-config
shell-script monitoring certificates
shell-script monitoring certificates
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
edited Jan 6 at 21:43
Rui F Ribeiro
39.6k1479132
39.6k1479132
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
asked Dec 14 '15 at 14:32
Ashish KarpeAshish Karpe
189317
189317
` Please check the master log (notice or debug)` Anything in master Icinga2 log file?
– 7171u
Dec 14 '15 at 14:50
I checked tailf /var/log/icinga2/icinga2.log there is no request from my ip also error.log is empty
– Ashish Karpe
Dec 14 '15 at 17:03
critical/cli: Failed to request certificate from Icinga 2 master.
– Ashish Karpe
Dec 14 '15 at 17:04
How do I confirm whether client and master are communicating something like check_nrpe -H nagios-server-ip
– Ashish Karpe
Dec 15 '15 at 10:29
Connection to master is not possible until the client has the certificate signed by CA. Try this: docs.icinga.org/icinga2/latest/doc/module/icinga2/toc#!/icinga2/…
– 7171u
Dec 15 '15 at 11:15
add a comment |
` Please check the master log (notice or debug)` Anything in master Icinga2 log file?
– 7171u
Dec 14 '15 at 14:50
I checked tailf /var/log/icinga2/icinga2.log there is no request from my ip also error.log is empty
– Ashish Karpe
Dec 14 '15 at 17:03
critical/cli: Failed to request certificate from Icinga 2 master.
– Ashish Karpe
Dec 14 '15 at 17:04
How do I confirm whether client and master are communicating something like check_nrpe -H nagios-server-ip
– Ashish Karpe
Dec 15 '15 at 10:29
Connection to master is not possible until the client has the certificate signed by CA. Try this: docs.icinga.org/icinga2/latest/doc/module/icinga2/toc#!/icinga2/…
– 7171u
Dec 15 '15 at 11:15
` Please check the master log (notice or debug)` Anything in master Icinga2 log file?
– 7171u
Dec 14 '15 at 14:50
` Please check the master log (notice or debug)` Anything in master Icinga2 log file?
– 7171u
Dec 14 '15 at 14:50
I checked tailf /var/log/icinga2/icinga2.log there is no request from my ip also error.log is empty
– Ashish Karpe
Dec 14 '15 at 17:03
I checked tailf /var/log/icinga2/icinga2.log there is no request from my ip also error.log is empty
– Ashish Karpe
Dec 14 '15 at 17:03
critical/cli: Failed to request certificate from Icinga 2 master.
– Ashish Karpe
Dec 14 '15 at 17:04
critical/cli: Failed to request certificate from Icinga 2 master.
– Ashish Karpe
Dec 14 '15 at 17:04
How do I confirm whether client and master are communicating something like check_nrpe -H nagios-server-ip
– Ashish Karpe
Dec 15 '15 at 10:29
How do I confirm whether client and master are communicating something like check_nrpe -H nagios-server-ip
– Ashish Karpe
Dec 15 '15 at 10:29
Connection to master is not possible until the client has the certificate signed by CA. Try this: docs.icinga.org/icinga2/latest/doc/module/icinga2/toc#!/icinga2/…
– 7171u
Dec 15 '15 at 11:15
Connection to master is not possible until the client has the certificate signed by CA. Try this: docs.icinga.org/icinga2/latest/doc/module/icinga2/toc#!/icinga2/…
– 7171u
Dec 15 '15 at 11:15
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f249293%2fcertificate-error-while-adding-hosts-in-icinga-monitoring-tool%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
draft saved
draft discarded
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f249293%2fcertificate-error-while-adding-hosts-in-icinga-monitoring-tool%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
` Please check the master log (notice or debug)` Anything in master Icinga2 log file?
– 7171u
Dec 14 '15 at 14:50
I checked tailf /var/log/icinga2/icinga2.log there is no request from my ip also error.log is empty
– Ashish Karpe
Dec 14 '15 at 17:03
critical/cli: Failed to request certificate from Icinga 2 master.
– Ashish Karpe
Dec 14 '15 at 17:04
How do I confirm whether client and master are communicating something like check_nrpe -H nagios-server-ip
– Ashish Karpe
Dec 15 '15 at 10:29
Connection to master is not possible until the client has the certificate signed by CA. Try this: docs.icinga.org/icinga2/latest/doc/module/icinga2/toc#!/icinga2/…
– 7171u
Dec 15 '15 at 11:15