Generate SSL Certificates

Clear the “request was aborted:Could not create ssl/tls secure channel” error.

Issue:
The generated SSL cert on the pool master isn’t good enough for Windows 10.

Fix:
Make a new certificate.

Modify the shell script /opt/xensource/libexec/generate_ssl_cert and find the section that reads:

openssl genrsa > privkey.rsa
openssl req -batch -new -x509 -key privkey.rsa -days 3650 -config config -out cert.csr
openssl dhparam 512 > dh.pem

Change it to the following:

openssl genrsa 1024 > privkey.rsa
openssl req -batch -new -x509 -key privkey.rsa -days 3650 -config config -out cert.csr
openssl dhparam 1024 > dh.pem

Run the following commands

mv /etc/xensource/xapi-ssl.pem /etc/xensource/xapi-ssl.pem.bak
/opt/xensource/libexec/generate_ssl_cert "/etc/xensource/xapi-ssl.pem" $(hostname -f)
xe-toolstack-restart

You should see it generating 1024 bit keys.

A reboot might be needed.