OPSI UCS - Invalid Certificate

UCS - Univention Corporate Server
, ,
#1

Hi,

i installed OPSI freshly on our UCS.
However iam not able to connect to the WebGUI due to certification problems.
NET::ERR_CERT_AUTHORITY_INVALID

I already tried to use
ucs-1234.mydomain.intranet:4447

as well as
sub.domain.tld:4447

which i usually use to login into the UCS webgui (which works with a certificate)

Any ideas what’s wrong and how to fix it?

#2

opsi uses it own CA (/etc/opsi/ssl/opsi-ca-cert.pem). You should import it in your browser.

Alternatively you can try to disable HSTS:

ucr set apache2/hsts='no'
systemctl restart apache2

You still have to wait for the end of $(ucr get apache2/hsts/max-age) or to use a different browser.

1 Like
Mastodon