How to find which ssl cert is used for node connection?

Icinga 2
1

After few times of trying to connect my node with master server, I successfully established a connection.
On running the node wizard few times, I have created multiple ssl certificates(Currently i see 3 set of ssl certs in /var/lib/icinga2/certs). I want to know which certificate is actually getting used, I don’t want to mess up my connection. Also I dont remember signing a certificate in Master icinga server too.

So my question(s) is:

  1. Is there a way to find which SSL certificate is actually used for the connection between Master and Node server? So that I can delete the other certificates apart from the ones that’s getting used.
  2. How can I be sure whether the SSL is actually getting used? Is there any way to verify that?

Icinga 2 version:
icinga2 - The Icinga 2 network monitoring daemon (version: r2.13.2-1)
Icinga2 Master and Node server OS: Ubuntu 20.04

2 
openssl s_client -showcerts -connect 127.0.0.1:5665

Shows the most relevant information including the certificate (chain) that is used on the specified port - Icinga in this case.

1 Like