Verify des client certificates funktioniert nicht.

Quellcode

[root@icinga2b pki]# pwd
/etc/icinga2/pki
[root@icinga2b pki]# ls -la
total 12
drwx------ 2 icinga icinga 4096 Jan 15 20:58 .
drwxr-x--- 9 icinga icinga 4096 Jan 15 18:21 ..
-rw-r--r-- 1 icinga icinga 1696 Jan 15 20:57 ca.crt
[root@icinga2b pki]# icinga2 pki new-cert --cn icinga2b --key icinga2b.key --csr icinga2b.csr
information/base: Writing private key to 'icinga2b.key'.
information/base: Writing certificate signing request to 'icinga2b.csr'.
[root@icinga2b pki]# icinga2 pki sign-csr --csr icinga2b.csr --cert icinga2b.crt
[root@icinga2b pki]# ls -la
total 24
drwx------ 2 icinga icinga 4096 Jan 15 20:58 .
drwxr-x--- 9 icinga icinga 4096 Jan 15 18:21 ..
-rw-r--r-- 1 icinga icinga 1696 Jan 15 20:57 ca.crt
-rw-r--r-- 1 icinga icinga 1688 Jan 15 20:58 icinga2b.crt
-rw-r--r-- 1 icinga icinga 1582 Jan 15 20:58 icinga2b.csr
-rw------- 1 icinga icinga 3243 Jan 15 20:58 icinga2b.key
[root@icinga2b pki]# openssl verify -verbose -CAfile /etc/icinga2/pki/ca.crt /etc/icinga2/pki/icinga2b.crt
/etc/icinga2/pki/icinga2b.crt: CN = icinga2b
error 7 at 0 depth lookup:certificate signature failure
140218027644744:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100:
140218027644744:error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed:rsa_eay.c:797:
140218027644744:error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib:a_verify.c:233: