rlm_perl plugin certificate verify failed

[jmdeking]

Hi There,

I get the following error when enabling SSL Check: privacyIDEA request failed: 500 Can't connect to privacyidea.changed.ch:443 (certificate verify failed)

i got an officially signed Comodo Positive SSL Wildcard Certificate  but as soon as i set SSL_Check to true i get the above error.

Any clue or tips as to why my certificate is not being accepted?

Server: Ubuntu 14.04

Privacyidea: Version: 2.12.1-1trusty

rlm_perl.ini:

[Default]

URL = https://privacyidea.changed.ch/validate/check

#REALM = someRealm

#RESCONF = someResolver

SSL_CHECK = true

#DEBUG = true

[jmdeking]

Nevermind, i got it!
Had to put in the intermediate certificate on certificatechainfile.in apache2.

SSLCertificateChainFile /etc/ssl/certs/COMODORSADomainValidationSecureServerCA.crt

[Cornelius Kölbel]

Hi,

thanks a lot for sharing your solution.

Kind regards
Cornelius

> --
> Please read the blog post about getting help
> https://www.privacyidea.org/getting-help/.
>
> For professional services and consultancy regarding two factor
> authentication please visit
> https://netknights.it/en/leistungen/one-time-services/
>
> In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
> which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
> https://netknights.it/en/leistungen/service-level-agreements/
> ---
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> Visit this group at https://groups.google.com/group/privacyidea.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/privacyidea/f8b4dc01-1778-420c-962d-877defe20b32%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

--
Cornelius Kölbel
corneliu...@netknights.it
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel