# Issue with connecting client to 2.4 production mender server

**URL:** https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287
**Category:** General Discussions
**Created:** [August 6, 2020, 10:15am UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287 "2020-08-06T10:15:58Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![fbayvat](https://avatars.discourse-cdn.com/v4/letter/f/e19b73/32.png) [@fbayvat](https://hub.mender.io/u/fbayvat)
#### Post date: [August 6, 2020, 10:15am UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287/1 "2020-08-06T10:15:58Z")

</div>

Hi i had issue with certificate authentication with my DART 6-UL device and i could not solve this. So i tried to connect a client on another machine to mender production server 2.4. I follow this link [https://docs.mender.io/2.4/client-configuration/installing#install-mender-provided-debian-package](https://docs.mender.io/2.4/client-configuration/installing#install-mender-provided-debian-package) to set up mender-client. I wrote my own server address where necessary in the configuration files.

This time i have different error.

 ![4](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/7cc72ff9d3f40870f78a6d4a6e9fdeb00b06dafd.png)

I would gladly accept if you have an idea or want to give advice.

Best regards.

---

<div class="post-metadata">

### Author: ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)
#### Post date: [August 6, 2020, 1:42pm UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287/2 "2020-08-06T13:42:34Z")

</div>

I suspect you still have a certificate verification issue. How did you setup the server? Where did you obtain the certificate?

Drew

---

<div class="post-metadata">

### Author: ![fbayvat](https://avatars.discourse-cdn.com/v4/letter/f/e19b73/32.png) [@fbayvat](https://hub.mender.io/u/fbayvat)
#### Post date: [August 6, 2020, 1:56pm UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287/3 "2020-08-06T13:56:48Z")

</div>

Thank you for response,

I followed [https://docs.mender.io/2.4/administration/production-installation](https://docs.mender.io/2.4/administration/production-installation) documentation. Certificate is generated with keygen in this doc.

ayvat

---

<div class="post-metadata">

### Author: ![dellgreen](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/dellgreen/32/85_2.png) [@dellgreen](https://hub.mender.io/u/dellgreen)
#### Post date: [August 6, 2020, 3:09pm UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287/4 "2020-08-06T15:09:33Z")

</div>

I might be worth verifying the certificate of the web server.

In the past i have used openssl s\_client on the client device to verify the certificate chain of trust of the webserver to make sure your everything you need is installed on your client device. You might need the ca-certificates recipe installed on your client device if the verification highlights a problem. For me as my It department is a cert-authority I needed to add their cert to the trust chain on my device.

> **[How To Verify SSL Certificate From A Shell Prompt - nixCraft](https://www.cyberciti.biz/faq/test-ssl-certificates-diagnosis-ssl-certificate/)**
>
> How do I verify and diagnosis SSL certification installation from a Linux / UNIX shell prompt? How do I validate SSL Certificate installation and save hours of troubleshooting headaches without using a browser? How do I confirm I've the correct and...

---

<div class="post-metadata">

### Author: ![fbayvat](https://avatars.discourse-cdn.com/v4/letter/f/e19b73/32.png) [@fbayvat](https://hub.mender.io/u/fbayvat)
#### Post date: [August 11, 2020, 7:35am UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287/5 "2020-08-11T07:35:05Z")

</div>

Hi again  
I had different issues last 4 days and today finally i can focus on the mender again. Thanks for the replies. Today i remove mender production server and surprisingly mender-client still getting response from the server. It did not make sense to me. Although the server is not installed (I cannot access the interface with ip) I still get an invalid character error from the server.

 ![a](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/64fbe0bae43b19d9df1c0958b87e7bd3cb70171e.png)

Can anyone give an idea about the reason for this?

In addition, I share the etc/hosts configs of the devices I work with because it seems to me that there is something wrong. Maybe the error I got could be related to this. I could not find the required etc/hosts configurations. I would be very happy if you could give the relevant link.

server machine etc/hosts (ip: 90)  
 ![90](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/ffb963bdbf9337778a962fd5cc81e37069d2c553.png)

yocto (dart6-ul) original edge client etc/hosts (ip: 84)  
 ![board](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/cc28345d9ccdd94007ce902169dfebc42362c742.png)

test mender client etc/hosts (ip: 91)  
 ![91](https://canada1.discourse-cdn.com/flex036/uploads/mender/original/1X/df560384077c9198aef80ce7e7ddfa325bd5adc7.png)

---

<div class="post-metadata">

### Author: ![drewmoseley](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/drewmoseley/32/47_2.png) [@drewmoseley](https://hub.mender.io/u/drewmoseley)
#### Post date: [August 11, 2020, 3:40pm UTC](https://hub.mender.io/t/issue-with-connecting-client-to-2-4-production-mender-server/2287/6 "2020-08-11T15:40:43Z")

</div>

You only need /etc/hosts modifications if you do not have a DNS entry setup for your server. The normal use case is that you use DNS to resolve the name and not rely on /etc/hosts.

If you don’t have DNS resolution then you need to add entries in your /etc/hosts file for both the API gateway and the Storage proxy. With the demo server these are set to [docker.mender.io](http://docker.mender.io) and [s3.docker.mender.io](http://s3.docker.mender.io) but with the production server, it’s based on your setup. Specifically the values you provided when you created the certificates.

As for the error on connecting, it seems that something is responding on port 443 on whatever you have specified as the Mender Server. I ran a local check and get a connection timeout rather than the error you are seeing.

Drew
