Bacula-users

Re: [Bacula-users] TLS bacula probleme

2009-07-30 11:39:11
Subject: Re: [Bacula-users] TLS bacula probleme
From: Jet Wilda <jet AT mycolo DOT biz>
To: John Drescher <drescherjm AT gmail DOT com>
Date: Thu, 30 Jul 2009 11:34:27 -0400
Yes.  The CN of the certificate needs to match what you put as the Address for the client configuration. i.e.

Client {
  Name = server-fd
  Address = server.domain
  FDPort = 9102
  Catalog = Catalog
  Password = Password
  AutoPrune = yes
  TLS Enable = yes
  TLS Require = yes
  TLS CA Certificate File = /bacula/CA.cachain.pem
  TLS Certificate = /bacula/DIR_SERVER_CERT.pem
  TLS Key = /bacula/DIR_SERVER_KEY.pem
}

~Jet

John Drescher wrote:
On Thu, Jul 30, 2009 at 11:03 AM, Siyoucef
Arslan<siyoucef.arslan AT yahoo DOT fr> wrote:
  
hello
I add a new external client, but I always have the same problem;
is that a person who has already successfully e TLS connect?
arslan


    
The following appears to be the problem:

29-jui 15:36 bconsole JobId 0: Erreur fatale : bnet.c:307 TLS host
certificate verification failed. Host name "127.0.0.1" did not match
presented certificate

However since I do not use TLS I am not sure exactly what steps to
take to fix this. Perhaps replacing the ipaddress with a host name or
FQDN that matched your certificate generation. I am not sure.

  
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users
<Prev in Thread] Current Thread [Next in Thread>