[Csync2] Connecting to host server35 (SSL) ... Peer did provide a wrong SSL X509 cetrificate.

[Clifford Wolf]

Hi,

On Wed, Apr 12, 2006 at 05:50:38PM -0700, Eric Liang wrote:
> Hi, Clifford, I saw this error in one of my installation. becasue
> something was not working, when I troubleshoot,
> I did make cert more than once, then I get this error. how to I fix
> this problem? anyway to force the csync2 to
> accept new certificate?

remove the old certificate from the database. This must be done directly
using the sqlite shell:

	# sqlite /var/lib/csync2/`hostname`.db
	sqlite> delete from x509_sha1 where peername = 'name-of-peer';

this behavior is the same as in ssh: the program refuses to connect to a
peer when the ssl certificate changed and does not provide an automatic way
of flushing the old certificate data.

yours,
 - clifford

-- 
/"\  ASCII Ribbon Campaign - against html email
\ /                        - against microsoft office attachments
 X                         - against text above fullquote below
/ \                        - against lines longer than 79 characters
 
"Gee, I wish we had one of those doomsday machines."
-- dr. strangelove, the movie