Forum Discussion

Nimbostratus

Sep 26, 2012

gtm_add failing

I have a new GTM that i want to add use with my existing GTM. I have configured the new GTM with a management IP, and provisioned the GTM section. From the doco I have read I now need to run th...

config

design

psavalam_195881

Nimbostratus

May 05, 2015

This may work, you might have to renew the device certificate and give the name other than the default localonly.localhost cert. Altough the internal root cert is same , this resolved issues with the

Sep 26 17:41:18 gtm01 iqmgmt_ssl_connect: SSL error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed Sep 26 17:41:18 gtm01 err gtmd[6206]: 011ae0fa:3: iqmgmt_ssl_connect: SSL error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (3361

This must be followed by the "bigip_add " to ensure iquery comm. and also the check if 4353 is responding.

Another check is to find the group-names are same on these GTMs

brad_11480
Nimbostratus
Apr 25, 2017
having the same message... my device certificates are issued by our internal PKI -- and are not self-signed.

communication is likely there as it does return that message.... and when i do a iqdump it shows it is trying to open the session.

how do i correct the certificate verify problem?
David__Pasch_24
Nimbostratus
Apr 26, 2017
Try installing your SSL cert as a bundle with the full chain to the CA Root Cert.
brad_11480
Nimbostratus
May 01, 2017
Bingo. Yes had to go futz it so the cert and its entire chain is provided. Appreciate the help.
David__Pasch
Altostratus
May 01, 2017
Excellent! Glad I helped. I am going to post my comment as an answer for the benefit of others.... and my stats. :)