[Spacewalk-list] question about tls verify osad client

[Michiel van Es]

Jan Wildeboer wrote:
> Michiel van Es wrote:
> 
> | 2008-07-07 02:08:01 osad._setup_config: Time drift 1500520
> 
> There could be a few things going wrong here, so to check from bottom up
> I would suggest to make sure:
> 
> 1. Time is synchronized between the spacewalk server and the client.
> Timedrift are a real problem in TLS handshakes.

Aaargh..you were right..there was a problem with the local ntp.conf and 
local ntp sync.
Changed ntp.conf and restarted ntpd and everything works now :)


> 
> 2. Name resolution works from the client and reverse resolver points to
> the correct hostname.
> 
> 3. Certificate does *NOT* contain the hostname in capital letters (this
> causes weird problems, I know from experience)
> 
> HTH

Thanks

Michiel
> 
> Jan

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20080724/ea039128/attachment.sig>