tyler.durden/icinga2
1
0
Fork 0
mirror of https://github.com/Icinga/icinga2.git synced 2025-07-20 04:04:32 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8221 from Icinga/feature/doc-node-wizard-verify-command

Browse Source 
Document command for verifying the parent node's cert
This commit is contained in:
Julian Brost 2020-12-03 09:41:17 +01:00 committed by GitHub
commit 2c9233eff3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/06-distributed-monitoring.md
View File

@ -605,6 +605,13 @@ The setup wizard fetches the parent node's certificate and ask
you to verify this information. This is to prevent MITM attacks or you to verify this information. This is to prevent MITM attacks or
any kind of untrusted parent relationship. any kind of untrusted parent relationship.
You can verify the fingerprint by running the following command on the node to connect to:
```bash
openssl x509 -noout -fingerprint -sha256 -in \
"/var/lib/icinga2/certs/$(hostname --fqdn).crt"
```
Note: The certificate is not fetched if you have chosen not to connect Note: The certificate is not fetched if you have chosen not to connect
to the parent node. to the parent node.