Hi,

While I am checking for the failover section in the kea guide under the
section

https://kea.readthedocs.io/en/kea-2.2.0/arm/hooks.html?highlight=trust-anchor#https-support
it says

The three parameters must be either all not specified (HTTPS disabled) or
all specified (HTTPS enabled)
--> I tried the case with empty files
Tried empty values for the fields trust-anchor,cert-file,key-file in
kea-dhcpd.conf in both primary and secondary but It didn't work then later
I made empty the fields also in kea-ctrl-agent.conf but still didn't work,
tried setting the param value require-client-certs and cert-required to
false but still didn't work
Again When I replaced it with a certificate file it worked, so I doubt if
the certificates are mandatory for kea-HA(2.2.0) in the latest version.

And also do we need to run the kea-control agent on both the primary and
failover servers?

Thanks in Advance
Kraishak

On Thu, Mar 30, 2023 at 6:51 PM <[email protected]> wrote:

> Do you mean through config file?
>
>
>
> *From:* Kea-users <[email protected]> * On Behalf Of *Kraishak
> Mahtha
> *Sent:* Thursday, 30 March 2023 15:02
> *To:* [email protected]
> *Subject:* [Kea-users] Kea-DHCP HA
>
>
>
> Hi all,
>
> I have recently started exploring kea-dhcp4 ha, I have a doubt can we
> configure the kea -HA without using kea-control agent ?
>
>
>
> Thanks in advance
>
> Kraishak
>
> _________________________________________________________________________________________________________________________
>
> Ce message et ses pieces jointes peuvent contenir des informations 
> confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu 
> ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
> electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou 
> falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged 
> information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete 
> this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been 
> modified, changed or falsified.
> Thank you.
>
>
-- 
ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users.

Kea-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/kea-users

Reply via email to