TLSv1.2 Alert - Unknown CA, error 500 can't connect to myglpisrv:443

[olo]

Hi,
I'm trying to set up FusionInventory Agent with SSL and I can't get it to work. The log shows:
[error] [http client] communication error: 500 Can't connect to myglpisrv.local:443

there's no more connectivity issues other than Wireshark says:
TLSv1.2 - Alert (Level: Fatal, Description: Unknown CA)

How can I troubleshoot?

I did use this - openssl x509 -inform der -in myglpisrv.local.cer -out myglpisrv.local.pem

[ddurieux]

Put debug=3 (or --debug --debug --debug) to have ssl log

[olo]

I'm not sure if I understood you right. I use this command line to install under w7:
fusioninventory-agent_windows-x64_2.3.8.exe /S /acceptlicense /add-firewall-exception /ca-cert-file="%ProgramFiles%\FusionInventory-Agent\perl\bin\myglpisrv.local.pem" /execmode=Service /server="https://myglpisrv.local/glpi" /no-p2p /runnow. The installation process completes without errors.

Adding /debug=3 stops the installation, /debug=2 works OK though. According to the documentation: 2 stands for Full debug.

[olo]

Using server's certificate apparently was a bad idea. I had to do this:
copy MyCompany-Root-CA.crt+MyCompany-Sub-CA.crt MyCompany-CAs.pem

The server's certificate was issued by MyCompany-Sub-CA.

Now, skip to the next error.