Re: [Bacula-users] TLS Problem after create new certificates with error ...OpenSSL 1.1, enforce basicConstraints = CA:true in the certificate...

2023-01-23 Thread Pierre Bernhardt
Am 23.01.23 um 13:31 schrieb Pierre Bernhardt: My self signed root ca and my certs has to been outdated. So I created a new ca key, self segned ca cert and new certs for bacula director and all clients. ... I only replaced the tls certs and installed a new ca cert. I double checked the inst

[Bacula-users] TLS Problem after create new certificates with error ...OpenSSL 1.1, enforce basicConstraints = CA:true in the certificate...

2023-01-23 Thread Pierre Bernhardt
My self signed root ca and my certs has to been outdated. So I created a new ca key, self segned ca cert and new certs for bacula director and all clients. The issue is that the message appears so i cerated a new ca cert so the basicConstraints = CA:true also contains the ca cert So I i

Re: [Bacula-users] TLS problem

2010-03-25 Thread Zsolt Kozak
Hi there, Finally I could fix the issue. :) The problem was with the FQDN... My Bacula-components used IP address instead of FQDN... It worked until I did not useTLS, but needed FQDN to make TLS working. ;) cheers, Zsolt On Wed, Mar 24, 2010 at 6:55 PM, Zsolt Kozak wrote: > Hi there, > > I goo

Re: [Bacula-users] TLS problem

2010-03-24 Thread Hugh Brown
Zsolt Kozak wrote: > I've tried that scenario before and now, but it's not working. It should not > be working because it's a server-client communication I guess, the bconsole > client is communicating with the director server... Am I right? I believe that each side needs to present a cert with th

Re: [Bacula-users] TLS problem

2010-03-24 Thread Zsolt Kozak
Hi, I've tried that scenario before and now, but it's not working. It should not be working because it's a server-client communication I guess, the bconsole client is communicating with the director server... Am I right? I noticed the same configuration in the article but here is another article

Re: [Bacula-users] TLS problem

2010-03-24 Thread Hugh Brown
Zsolt Kozak wrote: > Hi Hugh, > > Thanks for the fast reply. I forgot to post my config. Here they are: My *guess* would be that the "TLS Certificate" and "TLS Key" directives in both need to point to the same certificate, because they're on the same host. That's how I've got it set up on my mach

Re: [Bacula-users] TLS problem

2010-03-24 Thread Zsolt Kozak
Hi Hugh, Thanks for the fast reply. I forgot to post my config. Here they are: bacula-dir.conf: Director {# define myself Name = bacula-dir DIRport = 9101# where we listen for UA connections QueryFile = "/etc/bacula/scripts/query.sql" W

Re: [Bacula-users] TLS problem

2010-03-24 Thread Hugh Brown
Zsolt Kozak wrote: > Do you have any idea what's wrong? It's interesting that the TLS-connection > is OK on the server side, only the bconsole has problems with it Are you able to post the relevant parts of bacula-dir.conf and bconsole.conf? Seeing which certs are specified where might help.

[Bacula-users] TLS problem

2010-03-24 Thread Zsolt Kozak
Hi there, I googled around quite lot and got no answer for my TLS-issue, so I'm trying this email list. First of all I have a tested Bacula-system with working director, storage, filedaemon, bat and bconsole. I tried to set TLS in each components but failed, so I thought I was trying it step by s