Icinga cloned, error with deploy

(Frayber) #1

Hi, I cloned the vm with icinga because I have to do some tests, everything works except deploy with director, if I make it I get this error:

CURL ERROR: (RestApiClient.php:177)

in the icinga.log I see:

[2019-07-09 09:55:45 +0200] warning/TlsStream: TLS stream was disconnected.
[2019-07-09 09:55:45 +0200] critical/ApiListener: Client TLS handshake failed (from [127.0.0.1]:44470): Error: Socket was closed during TLS handshake.

server is listening on port 5665:

tcp 0 0 0.0.0.0:5665 0.0.0.0:* LISTEN 25995/icinga2

I enabled debug log but nothing more is displayed.
Which could be the problem? Thanks.

(Frayber) #2

with curl works:

curl -kv --user director:xxxxx https://localhost:5665/v1

  • About to connect() to localhost port 5665 (#0)
  • Trying ::1…
  • Connection refused
  • Trying 127.0.0.1…
  • Connected to localhost (127.0.0.1) port 5665 (#0)
  • Initializing NSS with certpath: sql:/etc/pki/nssdb
  • skipping SSL peer certificate verification
  • NSS: client certificate not found (nickname not specified)
  • SSL connection using TLS_RSA_WITH_AES_256_GCM_SHA384
  • Server certificate:
  •   subject: CN=xxxxx
    
  •   start date: Apr 13 07:45:08 2017 GMT
    
  •   expire date: Apr 09 07:45:08 2032 GMT
    
  •   common name: xxxxx
    
  •   issuer: CN=Icinga CA
    
  • Server auth using Basic with user ‘director’

GET /v1 HTTP/1.1
Authorization: Basic ZGlyZWN0b3I6aWNpbmdh
User-Agent: curl/7.29.0
Host: localhost:5665
Accept: /

< HTTP/1.1 200 OK
< Content-Type: text/html
< Transfer-Encoding: chunked
< Server: Icinga/r2.10.5-1
<

  • Connection #0 to host localhost left intact
Icinga 2

Hello from Icinga 2 (Version: r2.10.5-1)!

You are authenticated as director. Your user has the following permissions:

  • *

More information about API requests is available in the documentation.