Forum Discussion

RemcoAA's avatar
RemcoAA
Icon for Altostratus rankAltostratus
Jun 27, 2024

gtm_add failing due to CERT error

I am trying to cluster to GTM devices using the gtm_add command, but this is failing with this error: ERROR: found "END CERT..." without BEGIN at line: 0. ERROR: Malformed certificates found in loc...
gtm
RemcoAA's avatar
RemcoAA
Icon for Altostratus rankAltostratus

Hi,

TCP port 22 is open and we are using certificates signed by our Internal CA and these are working fine via the browser.

I also got the feeling this error happens before even an attempt is made to connect to the other device.

I am running v17.1.1.3

zamroni777's avatar
zamroni777
Icon for Nacreous rankNacreous
Jun 28, 2024

please try "openssl x509 -in /config/httpd/conf/ssl.crt/server.crt -text -noout" to verify the cert.

also see the "Signature Algorithm" in the output.
it should not be sha1
.

  • RemcoAA's avatar
    RemcoAA
    Icon for Altostratus rankAltostratus
    Jul 01, 2024

    the openssl command gives:

     

    Signature Algorithm: sha256WithRSAEncryption