I changed a CentOS 6 GNU/Linux hostname, and now everything is perfect regarding the new hostname. But when executing openssl commands, such as:
# openssl s_client -CApath /etc/ssl/certs -showcerts -connect google.com:443
CONNECTED(00000003)
139907232921416:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake
failure:s23_lib.c:184:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 247 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---
If I run the same command from other machine, which didn't change its original hostname, it just works perfectly. I understand I'm having an SSL issue, and I'm in the need to regenerate the server certificates for the new hostname I configured, right? How do we regenerate those certificates, such as if I am on the initial boot of the server?
ca-certificates
on CentOS.# openssl s_client -tls1_2 -servername wsaahomo.afip.gov.ar -connect wsaahomo.afip.gov.ar:443 -debug CONNECTED(00000003) write to 0x24d84a0 [0x24fb2a3] (276 bytes => -1 (0xFFFFFFFFFFFFFFFF)) write:errno=104 --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 0 bytes and written 0 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported ...