-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Awesome! This seems the easiest way then as I only have around 30 nodes.
Thanks! On 11/20/2015 06:16 PM, Michael Friedrich wrote: > Yep :-) > >> Am 20.11.2015 um 17:55 schrieb NOC <noc@babylon.network>: >> > But basically I can create new certificates with: > > * pki new-ca (sets up a new CA) * pki new-cert (creates a new CSR) > * pki request (requests a certificate) > > and run 'node wizard' on all nodes to fix it and make it work with > the new certificates? > >>>> On 11/20/15 5:42 PM, NOC wrote: Thanks for explaining what >>>> the problem seems to be. Your explanation makes sense. >>>> >>>>> On 11/20/15 5:34 PM, Michael Friedrich wrote: openssl x509 >>>>> -in mbmif.int.netways.de.crt -text >>>> >>>> The headers are: >>>> >>>> Certificate: Data: Version: 1 (0x0) Serial Number: 1 (0x1) >>>> Signature Algorithm: sha256WithRSAEncryption Issuer: >>>> CN=Icinga CA Validity Not Before: Jun 15 16:25:02 2015 GMT >>>> Not After : Jun 7 16:25:02 2045 GMT Subject: >>>> CN=icinga0.babylon.network Subject Public Key Info: Public >>>> Key Algorithm: rsaEncryption Public-Key: (4096 bit) Modulus: >>>> 00:e4:f8:ce:21:11:fd:cb:a2:77:c6:d5:24:7d:3c: >>>> 58:e3:36:c2:9f:cf:df:2e:ad:f5:fb:85:81:28:30: >>>> ef:81:42:c2:76:c7:7c:9a:92:66:35:8a:e9:f5:69: >>>> 6f:e3:4d:ee:58:23:8b:48:46:91:60:3f:a3:d3:44: >>>> 78:e2:58:7b:fa:e0:ed:47:89:c0:f6:e2:b9:a9:27: >>>> 0b:53:25:e6:01:46:3c:46:ff:1d:6c:2b:b7:c4:10: >>>> b3:3d:23:e8:bb:1a:d8:5b:f5:6f:c5:f5:fe:80:c6: >>>> 29:df:13:e4:ae:e9:99:1c:53:25:81:44:6c:d6:f0: >>>> 61:33:2c:da:51:c1:5e:77:49:95:c5:a7:d2:13:3d: >>>> c0:8d:20:60:31:27:3a:b8:11:f2:84:4a:22:27:a8: >>>> 95:90:5f:4f:57:fc:f5:07:76:24:a0:ea:ec:a4:07: >>>> 01:70:da:9c:22:1e:cf:27:9c:aa:dc:58:f5:15:45: >>>> 67:25:f4:c2:31:c4:da:ad:41:1a:0a:d5:19:7d:3c: >>>> 2b:90:d3:26:82:9a:17:ce:5b:e2:41:8a:54:33:b3: >>>> 7e:9d:ec:10:fe:73:3a:c8:9c:bd:26:4f:ce:fe:12: >>>> 1a:ea:39:bd:a5:da:5f:39:70:a1:d8:f8:02:50:07: >>>> 1f:08:65:69:b4:e3:05:9b:e7:da:8b:cb:d4:1f:ee: >>>> 69:fd:9b:0f:dd:8a:27:ee:54:2a:80:d2:f8:f6:7e: >>>> 62:a9:91:92:e4:e0:21:e7:23:eb:fa:57:d5:9d:3c: >>>> fe:bb:23:bb:86:9c:a5:39:57:db:27:e1:07:9a:42: >>>> 85:64:02:57:30:88:f2:97:ff:3a:3e:f1:32:7e:88: >>>> d2:7b:f3:67:29:10:32:3b:ca:37:81:71:5c:e5:5c: >>>> b5:c9:2e:da:24:cc:97:1b:5b:f5:7c:04:80:1d:b5: >>>> 91:06:ef:a5:3d:d0:55:5e:8f:97:af:6e:dd:ce:88: >>>> 7f:bd:a8:d8:dd:42:e8:bf:15:9b:9d:24:93:cf:81: >>>> 6d:41:1d:1c:79:a5:7e:f1:66:12:93:b6:d9:05:63: >>>> b5:c0:87:2b:f5:d2:5e:04:61:41:9b:8d:cc:93:c9: >>>> 11:2c:1a:2d:08:f1:10:a7:ec:7d:78:37:0f:94:83: >>>> d2:a2:73:73:6e:b2:29:87:f4:d9:28:be:5f:46:ed: >>>> 89:43:11:4d:a0:68:71:13:25:3b:0d:7e:45:39:84: >>>> 37:b1:82:e2:90:00:9f:b7:88:a1:39:39:87:77:9a: >>>> 69:2c:13:67:d0:3e:fb:f3:2f:6f:1f:78:d5:80:1c: >>>> af:61:b9:fd:f9:56:ad:32:77:7e:7a:5a:70:3c:85: >>>> aa:49:14:df:62:4b:71:c2:f5:d8:94:05:6c:31:b0: 99:d9:e7 >>>> Exponent: 65537 (0x10001) Signature Algorithm: >>>> sha256WithRSAEncryption >>>> 3a:00:42:c2:24:83:39:4c:d4:5f:a8:ed:3c:07:c8:88:2a:3e: >>>> a8:47:b3:ce:df:94:6d:6d:8d:c8:cb:38:3c:7f:d7:92:b8:53: >>>> 8b:e2:9f:42:89:63:f8:c8:b1:3f:42:2d:ef:67:89:bd:7b:6d: >>>> 29:c9:e4:83:33:78:a7:86:35:6c:11:4b:6c:f5:51:ed:a3:ca: >>>> f8:ab:d8:f0:cc:c4:5f:17:08:a3:e0:95:7d:df:29:c0:45:60: >>>> ff:1c:66:35:96:32:ca:ef:9e:4e:b6:b7:f6:39:48:e3:6b:dd: >>>> b8:b2:c3:d8:1d:3d:ce:99:ca:79:bf:1a:36:a9:cc:4e:ad:f1: >>>> 52:70:c1:1d:c9:63:07:38:c3:b0:c1:c1:55:54:3e:0f:92:f8: >>>> a8:f7:56:33:e9:40:1c:28:9b:3b:5b:8c:ea:bc:70:c6:46:68: >>>> 91:21:a4:36:8a:53:a3:ef:04:4f:e1:80:2d:6a:dd:44:e2:40: >>>> 6b:00:43:81:7d:fc:99:45:3e:99:ff:a8:da:36:a5:66:cb:9f: >>>> 30:f4:da:67:44:07:96:a9:9d:48:41:27:e1:f0:6a:d9:1c:ef: >>>> 90:6f:05:7d:fd:e9:d3:49:66:d0:60:a7:4c:cf:03:90:57:5e: >>>> d9:2d:dd:15:b6:c4:58:02:bd:c5:83:ed:0d:65:6e:46:00:ea: >>>> e8:77:6c:02:57:64:25:19:b6:ef:80:17:89:b6:e7:c5:8e:a5: >>>> a9:f8:37:e3:07:e0:59:36:3e:97:16:e3:07:ee:3e:8d:71:00: >>>> d6:36:c2:6a:46:2c:d1:9a:3a:76:29:0e:9a:18:23:24:10:74: >>>> 10:b2:a1:c7:07:d2:c7:aa:c6:cd:71:17:b2:7d:1b:f2:22:a5: >>>> a7:2d:0a:68:13:8d:3b:e8:5a:9f:e3:26:90:35:12:09:46:cf: >>>> 5f:56:3e:f1:22:71:d9:af:29:df:ab:d9:f8:20:14:13:ee:2a: >>>> ca:1d:04:47:42:3f:d1:9f:02:91:5b:10:02:67:db:3a:93:7b: >>>> 3d:2d:1a:9a:d6:6d:2c:55:a2:5b:5e:66:0d:9b:33:90:9d:98: >>>> 98:5d:7e:4e:06:07:0e:78:21:04:1e:f0:25:ad:0a:bc:73:35: >>>> dc:c2:87:87:18:a0:c8:be:80:ae:d4:2b:43:b4:11:74:9d:9e: >>>> 7f:f4:67:4e:c9:27:e5:92:b2:84:8d:bc:0b:e9:03:f8:7a:90: >>>> 61:15:db:19:f5:fa:a8:cb:cf:79:52:94:c5:f1:a0:0b:8a:bd: >>>> f0:8e:18:c8:be:c4:28:d5:5e:78:be:46:c8:d4:75:b3:2a:fd: >>>> 29:fe:0f:a4:8e:ef:81:56:e3:a5:e0:80:f8:e5:29:ff:e3:3d: >>>> 04:d2:da:32:36:e5:6b:6c >>>> >>>> _______________________________________________ icinga-users >>>> mailing list icinga-users@lists.icinga.org >>>> https://lists.icinga.org/mailman/listinfo/icinga-users > >> _______________________________________________ icinga-users >> mailing list icinga-users@lists.icinga.org >> https://lists.icinga.org/mailman/listinfo/icinga-users > > --? Michael Friedrich, DI (FH) Senior Developer > > NETWAYS GmbH | Deutschherrnstr. 15-19 | D-90429 Nuernberg Tel: +49 > 911 92885-0 | Fax: +49 911 92885-77 GF: Julian Hein, Bernd Erk | AG > Nuernberg HRB18461 http://www.netways.de | > michael.friedr...@netways.de > > ** OSMC 2015 - November - netways.de/osmc ** ** OSDC 2016 - April – > netways.de/osdc ** > - -- Tim Semeijn Babylon Network PGP: 0x2A540FA5 / 3DF3 13FA 4B60 E48A E755 9663 B187 0310 2A54 0FA5 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQIcBAEBCgAGBQJWT3qRAAoJELGHAxAqVA+lSWEQAL/kdf4sN9bkArgGf4EFIS+e fIwuClK2VJjAffVG83civnTjd/mGGuj6zqq6ktwLQJX/cpLInuuFb1XjFBxHR/dp 2gFIa42m3AaVviHYYPAGM+4DIAO7x5o2P8OnuEl3quf5VB+ZZxTK2Ivpv+ahEYXV lggtA/Mld5NVmf5gVAJ3euznR5noLFKNLxoqdX5h4wEe+UUkPRsd6gVayWP0iUx/ yxEMg+DY9u4I4gukh5CjevHXVX5xlZTAtVmLhm7sfofF/pWtbAmMPU688BhP1dZA 75gWjA3Q7g0Xu+wb8chvzDM08hM5Eu9BUZKCbrYQl492OVriNztn2cXSEfwej9Ib RkRhye6t+NkP3FqmwO8buCiSHmPljy5l1gGUjH3mO9KcY2OHxbc6EaT+A02ODaI3 okQi2TE6iDpBmtWbQFew5d5OoBhSRxtlRP4rVxYR5efnX2EawvBjdG54FzGjDu2+ /DhazSbBgp5uAXpYXwlvKheue2nlr+V4mwU+08/cnuUeJbDY+X15HT/siKsL2iyK 8SpFJx+G5s9s7jhXTIONvnjVECTvMVRnKbXVPw2sAZBNTZIZZxvAWwNcgantZCis ITtEKHyWYsRya5gUuYEo5tB8VFRLw5cU86Qg54bODOKcD/+ATiblxjv7UpPgCiWU URsCtz+77reGLNWGFzgW =kWtj -----END PGP SIGNATURE----- _______________________________________________ icinga-users mailing list icinga-users@lists.icinga.org https://lists.icinga.org/mailman/listinfo/icinga-users
