tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Document command for verifying the parent node's cert 

... during node wizard execution.
This commit is contained in:
Alexander Aleksandrovič Klimov 2020-09-09 12:29:44 +02:00 committed by GitHub
parent 2483f7570b
commit ab0ac8137b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/06-distributed-monitoring.md
View File

@ -605,6 +605,13 @@ The setup wizard fetches the parent node's certificate and ask
you to verify this information. This is to prevent MITM attacks or
any kind of untrusted parent relationship.
You can verify the fingerprint by running the following command on the node to connect to:
```bash
openssl x509 -noout -fingerprint -sha256 -in \
"/var/lib/icinga2/certs/$(hostname --fqdn).crt"
```
Note: The certificate is not fetched if you have chosen not to connect
to the parent node.