[SOLVED] Beginner - Problem with certificates

Questions about WAPT Server / Requests and help related to the WAPT server
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
Duster
Messages: 9
Registration: January 19, 2022 - 12:20

January 19, 2022 - 12:39

Hello to the entire community,

To begin, here is the essential information about my version of WAPT:
WAPT Enterprise version 2.1.2.10605
Currently installed on a Windows 10 machine

And now a little background:
I work in a small IT department where I've been tasked with deploying WAPT across the network. None of us in the department have been able to find a solution to the problem I'm encountering, so I'm posting here. I installed the WAPT server on a dedicated Windows 10 machine to test the entire system before properly migrating everything to the final server. I have limited knowledge of SSL web certificates and the HTTPS protocol, which is why I'm asking for your help.

Difficulty encountered:

My test machines are not showing up in the WAPT console. When I run a command found in the documentation: wapt-get enable-check-certificate, I get the following error:
WARNING Warning, certificate CN SERVERNAME.lan sent by server does not match URL host SERVERNAME
Server certificate: C:\Program Files (x86)\wapt\ssl\server\SERVERNAME.lan.crt


And the rest, with several other lines indicating that the hostname is not included in the subjectaltnames extension of the certificate...

When I retrieve the server's HTTPS certificate via the button in the preferences, I notice that the certificate name ends with .lan, and I would like the server to be accessible locally. A static IP address has been assigned to the server for this purpose.

I don't understand where my mistake lies. I've searched and found various suggestions in the documentation and forum, including regenerating the certificate. I've also reinstalled the server, but I can't seem to get around this problem...

I'm sure I'm doing something wrong.

Would a kind soul be able to guide me?

Thank you !

EDIT: It was a DNS error in my configuration
Last edited by Duster on 04 Feb 2022 - 10:01, edited 1 time.
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

January 20, 2022 - 9:40 AM

Hello

, did you replace the self-signed certificate of the WAPT server, or did you leave the default installation?

The error is this:

The address specified in wapt-get.ini does not match the address specified in the certificate.

Are you using a Windows or Linux server?

Simon
Duster
Messages: 9
Registration: January 19, 2022 - 12:20

January 21, 2022 - 08:52

Hello Simon,

Thank you for your message!

I haven't replaced the WAPT server's self-signed certificate. I followed the installation instructions for version 2.1. The server runs on Windows.

Best regards,
Locked