I'm trying to get Bareos working with TLS encryption using a self-signed certificate.
I have used the name of the server for the self-signed certificate CN. The server does NOT have a domain set.
But I'm getting an error...
# bconsole Connecting to Director Server-Name:9xxx Authorization problem with Director at "Server-Name:9xxx" Most likely the passwords do not agree. If you are using TLS, there may have been a certificate validation error during the TLS handshake. Please see http://doc.bareos.org/master/html/bareos-manual-main-reference.html#AuthorizationErrors for help.
Also from the log...
05-Oct 10:23 bareos-dir JobId 0: Fatal error: Authorization problem: Remote server did not advertize required TLS support. 05-Oct 10:23 bareos-dir: ERROR in authenticate.c:283 Unable to authenticate console "*UserAgent*" at client:17.x.x.x5:9xxx.
I'm curious if this has to do with how TLS resolves the hostname to match it to the certificate. The CN/Name-of-the-server is in /etc/hosts, but is not resolvable via DNS.
root@Server-Name ~ # hostname Server-Name root@Server-Name ~ # domainname (none) root@Server-Name ~ # ping Server-Name PING Server-Name (17x.x.x.x5) 56(84) bytes of data. 64 bytes from Server-Name (17x.x.x.x5): icmp_seq=1 ttl=64 time=0.042 ms 64 bytes from Server-Name (17x.x.x.x5): icmp_seq=2 ttl=64 time=0.034 ms 64 bytes from Server-Name (17x.x.x.x5): icmp_seq=3 ttl=64 time=0.040 ms ^C --- Server-Name ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 1998ms rtt min/avg/max/mdev = 0.034/0.038/0.042/0.007 ms root@Server-Name ~ # nslookup Server-Name Server: 2x.x.x.x0 Address: 2x.x.x.x0#53 ** server can't find Server-Name: NXDOMAIN