Secondary master SSL errors

Icinga 2
,
1

Hi,

I see these errors on the secondary master in the icigna2.log. This is on v2.5.4

critical/SSL: Could not open CA key file '/var/lib/icinga2/ca/ca.key': 33558530, "error:02001002:system library:fopen:No such file or directory"
critical/SSL: Error on bio X509 AUX reading pem file '/var/lib/icinga2/ca/ca.crt': 33558530, "error:02001002:system library:fopen:No such file or directory"

AFAIK, the CA directory should only exist on the config master. The ca.key currently in /etc/icinga2/pki on the secondary. So I don’t understand why we see these errors on it.

Please advise,
Thanks

2

2.5.4 is a quite old version, so I’m not sure if it has any quirks with the CA. Please upgrade to an up-to-date version and check if this is even an issue any more. We currently support 2.12.x and 2.13.x, but given the big version jump, I don’t see a reason for choosing 2.12.x and I’d directly go for the most recent version, 2.13.2 at the moment.