tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8221 from Icinga/feature/doc-node-wizard-verify-command 

Document command for verifying the parent node's cert
This commit is contained in:
Julian Brost 2020-12-03 09:41:17 +01:00 committed by GitHub
parent 9b6326ce72 ab0ac8137b
commit 2c9233eff3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/06-distributed-monitoring.md
View File

@ -605,6 +605,13 @@ The setup wizard fetches the parent node's certificate and ask
you to verify this information. This is to prevent MITM attacks or
any kind of untrusted parent relationship.
You can verify the fingerprint by running the following command on the node to connect to:
```bash
openssl x509 -noout -fingerprint -sha256 -in \
"/var/lib/icinga2/certs/$(hostname --fqdn).crt"
```
Note: The certificate is not fetched if you have chosen not to connect
to the parent node.