Dear Maintainer, I tried to configure upsd with OpenSSL, with directives CERTFILE, CERTVERIFY and FORCESSL in upsd.conf as described in http://networkupstools.org/docs/user-manual.chunked/ar01s09.html. Restarting upsd afterwards gives this output: upsd.conf: invalid directive CERTFILE /etc/nut/ssl/nut.srv.tld.pem upsd.conf: invalid directive CERTVERIFY 1 upsd.conf: invalid directive FORCESSL 1 To me it looks like the package wasn't compiled with OpenSSL support. Is this by chance connected to GitHub issue #429?
I reproduced this scenario and IMHO SSL is not available in the package. I ran the command "openssl s_client -showcerts -connect upshost.domain.lan:3493" and the answer was: CONNECTED(00000003) 3073304256:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:794: --- no peer certificate available --- No client certificate CA names sent --- SSL handshake has read 7 bytes and written 305 bytes --- New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : 0000 Session-ID: Session-ID-ctx: Master-Key: Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None Start Time: 1514489634 Timeout : 300 (sec) Verify return code: 0 (ok) --- Which I think confirms that there is no SSL option running. Even after configure it following the documentation published at http://networkupstools.org/docs/user-manual.chunked/ar01s09.html My setup also says "upsd.conf: invalid directive CERTFILE /etc/nut/certs/upsd.pem" during upsd service initialization. I'm running the Ubuntu version (nut 2.7.2-4ubuntu1.2), but I think is based on this one.
Please check this out: https://bugs.launchpad.net/ubuntu/+source/nut/+bug/1014347