[Kea-users] TLS for the communication between Stork Agent and Kea Control Agent

[Maria Hrabosova]

Hi,

Does anyone have an experience with using TLS for the communication 
between Stork Agent and Kea Control Agent? I tried to use the 
certificates generated during Stork Agent registration for both Stork 
Agent and Kea Control Agent hoping that they would be able authenticate 
against each other, but the TLS handshake failed.

{
   "Control-agent": {
     ...
     "trust-anchor": "/var/lib/stork-agent/certs/ca.pem",
     "cert-file": "/var/lib/stork-agent/certs/cert.pem",
     "key-file": "/var/lib/stork-agent/certs/key.pem",
}

2022-02-03 08:05:04.134 INFO [kea-ctrl-agent.http/7518.139986295949504] 
HTTP_CONNECTION_HANDSHAKE_FAILED TLS handshake with 192.168.1.42 failed 
with no shared cipher

Do you have any hints how to make the TLS handshake succeed? Thanks in 
advance.

Best regards,

Maria