Page 1 of 1

LDAP SSL Existing Certificate

Posted: Thu Sep 19, 2024 1:25 pm
by bergna
Hello!! I can´t add a CA certificate for to configure LDAP SSL. When try, error is "This certificate already exists"

I've NagiosXI v 5.10.0
I tried
chown -R apache.nagios /usr/local/nagiosxi/var/certs
and
chmod 777 /usr/local/nagiosxi/var/certs
I'm using SSL whith GUI and its OK

Thanks

Re: LDAP SSL Existing Certificate

Posted: Thu Sep 19, 2024 5:09 pm
by ajcoil
Hello @bergna,

Thank you for reaching out!

I have a few questions to better understand your situation:
------------------------------------------------------------------------
1. What distribution are you running Nagios XI on?

2. Do you have any existing certs in the following directory?

Code: Select all

/etc/openldap/certs

Re: LDAP SSL Existing Certificate

Posted: Fri Sep 20, 2024 12:55 pm
by bergna
Hello @ajcoil

I'm running Nagios on a
CentOS Linux release 7.9.2009 (Core)

And in /etc/openldap/certs
-rw-r--r--. 1 root root 65536 Jul 11 2019 cert8.db
-rw-r--r--. 1 root root 16384 Jul 11 2019 key3.db
-r--------. 1 root root 45 Jul 11 2019 password
-rw-r--r--. 1 root root 16384 Jul 11 2019 secmod.db

certificates for SSL GUI are in /usr/local/nagiosxi/var/certs/

Thanks in advance

Re: LDAP SSL Existing Certificate

Posted: Fri Sep 20, 2024 1:42 pm
by sgardil
bergna wrote: Fri Sep 20, 2024 12:55 pm Hello @ajcoil

I'm running Nagios on a
CentOS Linux release 7.9.2009 (Core)

And in /etc/openldap/certs
-rw-r--r--. 1 root root 65536 Jul 11 2019 cert8.db
-rw-r--r--. 1 root root 16384 Jul 11 2019 key3.db
-r--------. 1 root root 45 Jul 11 2019 password
-rw-r--r--. 1 root root 16384 Jul 11 2019 secmod.db

certificates for SSL GUI are in /usr/local/nagiosxi/var/certs/

Thanks in advance
Can you run this command and see if the cert you are trying to add is already there?
ls -l /usr/local/nagiosxi/var/certs/

The error given doesnt sound like a permissions issue. It could be a caching issue if you don't have the certificate already made in that file. Also check to see who owns the file if it does exist in that directory.