← Back to team overview

epoptes team mailing list archive

Re: [Question #206372]: Epoptes fails after update....certificate issue

 

Question #206372 on Epoptes changed:
https://answers.launchpad.net/epoptes/+question/206372

David Trask gave more information on the question:
I ran the following commands on the server:

root@edubuntu-server:~# openssl s_client -connect localhost:789 < /dev/null | sed '/-----BEGIN CERTIFICATE-----/,/-----END CERTIFICATE-----/!d'
140385195333280:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:749:

and

root@edubuntu-server:~# openssl s_client -connect localhost:789
CONNECTED(00000003)
140002966705824:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:749:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 7 bytes and written 226 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---


also

On the server:

ls -lha /etc/epoptes
total 20K
drwxr-xr-x   2 root root 4.0K Aug 10 13:36 .
drwxr-xr-x 156 root root  12K Aug 20 22:11 ..
-rw-r--r--   1 root root    0 Aug 20 20:56 server.crt
-rw-------   1 root root  916 Aug 10 13:36 server.key

ON THE CLIENT

root@edubuntu-server:~# chroot /opt/ltsp/i386/
root@edubuntu-server:/# ls -lha /etc/epoptes
total 8.0K
drwxr-xr-x  2 root root 4.0K Aug 12 20:16 .
drwxr-xr-x 91 root root 4.0K Aug 21 01:37 ..
-rw-r--r--  1 root root    0 Aug 21 02:01 server.crt

Also on the client

root@edubuntu-server:/# openssl s_client -connect 10.0.15.200:789 <
/dev/null | sed '/-----BEGIN CERTIFICATE-----/,/-----END
CERTIFICATE-----/!d'4147853512:error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:749:

NOTE:  this is a single NIC install...there is no firewall in the way.
Also...epoptes is working...except I have lost the ability to see
clients prior to logging in and the ability to wake-on-lan....etc.
Since I cannot see them until they are logged in.  I had it working
fine, but something has broken.

-- 
You received this question notification because you are a member of
Epoptes Developers, which is an answer contact for Epoptes.