Issue setting mandos up (best clue "Bad certificate: Verify failed")

Marc Fargas marc at marcfargas.com
Thu May 10 22:15:48 CEST 2018


Hello,

It is my second time setting up Mandos and I'm facing a misterious issue
(misterious because logs give no clue).

This time my mandos server is a Raspberry Pi 2 B, raspbian.

The setup is quite simple:
- On the server I install mandos package, then I add to client.conf the
entry as provided by the client's mandos-keygen. I have two client entries.
- On the client I call mandos-keygen --name somename -p; then take the
output and put it on client.conf

Now, as per README.Debian.gz I test the setup prior to reboot and I only
get:
On the server:  "WARNING: Bad certificate: Verify failed"
On the client: no output at all.

So I try with --debug on both sides, and now the client says: "Retrying in
10 seconds"

The certificate message is a Warning so it should not be too bad, though
it's the only message I have ;(

Now, I gave up and decided to ask for help!
This is full server side log: https://pastebin.com/A07sTnQz
This is full client side log: https://pastebin.com/BLzqf3x0

I hope there's the clue to the issue and that somebody can point me in the
right direction!

Thank you,
marc

PS: Sorry, I'm on gmail and don't know how to make it send text/plain
messages :(


-- 
http://www.marcfargas.com - will be finished someday.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.recompile.se/pipermail/mandos-dev/attachments/20180510/d7c40ccc/attachment.html>


More information about the Mandos-Dev mailing list