Symantec Directory: Error while adding new host to Directory installation fails with "Failed to set up SSL communication with dxagent, check your SSL certificates and key"

Products

• CA Directory

Issue/Introduction

The issue with adding a new host to installation.

Error

Retrieve installation information from dxagent 'server_name.test.net' : Failed to set up SSL communication with dxagent, check your SSL certificates and key

Environment

Release : 14.1

Resolution

If the file looks similar to this:

********************************************

name: test

Host: {server hostname}

port: 9443

CA Cert: /opt/CA/Directory/dxserver/dxagent/openssl-ca/CA/certs/ca.pem

Client Cert: /opt/CA/Directory/dxserver/dxagent/openssl-ca/out/certificate.pem

Client Key: /opt/CA/Directory/dxserver/dxagent/openssl-ca/out/certificate.key

********************************************

In CA cert, client cert, and client key fields the actual certificates in PEM format need to be put, and not the paths to those certificates.

Need to copy the content of the files to the corresponding fields in the form.

 

Additional Information

If further issues appear like The connection being refused check if certificates are valid, not revoked and that firewall is not blocking the connection.