Jump to content

MAC OS client cannot connect to ERA


Recommended Posts

Hi there.

I installed ERA6 on my server2012. I can see the windows clients on ERA,but can't see any MAC OS clients .What may be wrong ?

here is the status.html:

Status log

Scope Time Text
Last replication 2017-Jun-13 08:13:08 Error: CReplicationManager: Replication (network) connection to 'host: "10.0.0.248" port: 2222' failed with: Receive: NodSslWriteEncryptedData: Internal error in the underlying implementations.
Peer certificate 2017-Jun-13 07:59:18 Error
  • Agent peer certificate with subject 'CN=Agent at *' issued by 'CN=服务器证书颁发机构' with serial number '01707fdb8c945b4072b1cbc7d79ff2b04f01' is invalid now (NodVerifyTrustResult: 42, NVT_NotTrusted, X509ChainStatus: 0x1, X509CSF_NotTimeValid)
  • Peer certificate may be valid but can not be verified on this machine
  • Check time validity and presence of issuing certification authority
Replication security 2017-Jun-13 08:13:08 Error: NodVerifyCertificateChain failed: NodVerifyTrustResult: 42, NVT_NotTrusted, X509ChainStatus: 0x1, X509CSF_NotTimeValid
  • Remote host: 10.0.0.248

Performance

Indicator Value
Up time 00:14:07
Kernel time 4 sec., 0.5 % of up time
User time 4 sec., 0.5 % of up time
Memory private usage 38 MB
Memory working set 759 MB
Memory peak working set 759 MB
Available physical memory 1636 MB
Total I/O reads 0 KB
Total I/O writes 0 KB
Total I/O others 0 KB

Generated at 2017-Jun-13 08:13:08 (2017-Jun-13 16:13:08 local time)
Link to comment
Share on other sites

  • ESET Staff

There is a known issue kb5949 with certificate validation on OS X:

Quote

Certificates with validity ending after year 2037 are not supported on Mac OS X. It is not possible to parse a date variable from the Certificate Authority on Mac OS X. The Agent cannot connect, because OS X cannot accept the Certificate Authority.

Not able to confirm from provided logs, but highly probably.

In case it is this issue, you will have to create new certificates so that they can be used on OSX -> this means creating new CA certificate, SERVER certificate and AGENT certificate.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...