Actions in case of problems with TLS/SSL certificates on VEOS [Документация VAS Experts]

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
en:veos:first_install:tls_ssl_problems [2023/12/20 15:06] – created elena.krasnobryzhen:veos:first_install:tls_ssl_problems [2024/09/26 15:29] (current) – external edit 127.0.0.1
Line 7: Line 7:
 </code> </code>
  
-  - You need to check the date and time on the server/in the bios. The date and time must be up to date.+  - You need to check the date and time on the server/in the bios. The date and time must be up to date.\\ \\ The output of ''timedatectl'' should state: ''System clock synchronized: yes''.\\ If not specified, edit ''/etc/chrony.conf'', then execute ''systemctl restart chronyd''.\\ \\ You can also swap out the VEOS pool for the Centos pool: ''pool 2.veos.pool.ntp.org'' → ''pool 2.centos.pool.ntp.org''
   - Verify that the root TLS certificate is not being spoofed:<code bash>openssl s_client -connect abcdef.com:443</code>   - Verify that the root TLS certificate is not being spoofed:<code bash>openssl s_client -connect abcdef.com:443</code>
   - Check firewall settings — port 443 should be open.   - Check firewall settings — port 443 should be open.