Hello,
most of the hr.srce.CADist-Check nagios tests are failing in Sheffield since Dec 1 and I have a ggus opened on Tuesday.
(https://ggus.eu/index.php?mode=ticket_info&ticket_id=110498)
The error message is
wn030.hep: CA DIST CRITICAL - The official version is 1.61. Using AAACertificateServices to get CA distribution version. The following CAs have incorrect SHA1 fingerprint: cilogon-openid.
on wn030 i can see that version 1.61 is installed:
[root@wn030 ~]# rpm -qa |grep ca-policy-egi-
ca-policy-egi-core-1.61-1.noarch
All wn’s are on automatic update and new version of ca-policy 1.61 has been installed on Nov24:
Nov 24 05:16:19 Updated: ca_AddTrust-External-CA-Root-1.61-1.noarch
Nov 24 05:16:20 Updated: ca_UTN-USERTrust-RSA-CA-1.61-1.noarch
Nov 24 05:16:21 Updated: ca_DigiCertGridRootCA-Root-1.61-1.noarch
Nov 24 05:16:22 Updated: ca_DigiCertAssuredIDRootCA-Root-1.61-1.noarch
Nov 24 05:16:22 Updated: ca_UKeScienceRoot-2007-1.61-1.noarch
Nov 24 05:16:23 Updated: ca_UTN-USERFirst-Hardware-1.61-1.noarch
Nov 24 05:16:24 Updated: ca_COMODO-RSA-CA-1.61-1.noarch
Nov 24 05:16:24 Updated: ca_CNRS2-1.61-1.noarch
Nov 24 05:16:25 Updated: ca_CNRS2-Projets-1.61-1.noarch
Nov 24 05:16:25 Updated: ca_QuoVadis-Root-CA1-1.61-1.noarch
……….
Some wn’s are passing the tests, but most of the wn;s are not despite all of them have the same ca-policy-egi-core-1.61-1.noarch.
I can’t find what exactly this nagios test is doing.
Any thoughts/help are greatly appreciated.
Elena
ps ce’ s also have ca-policy 1.61. But it was installed on Tuesday, Dec 2.
|