You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

#1 2017-07-24 16:20:28

lecko
Member
Registered: 2017-07-24
Posts: 2

SSL 500 Error on some Centos systems when communicating to GLPI server

We use for some time GLPI 9.1.1 server and many system were succesfully added.
Now we came to the group of Centos 6.5 systems, that report some strange errors, related to SSL.

For example:

]# fusioninventory-agent --debug

I get this into log file:


[Mon Jul 24 16:05:30 2017][debug] FusionInventory Agent (2.3.19)
[Mon Jul 24 16:05:30 2017][debug] Configuration directory: /etc/fusioninventory
[Mon Jul 24 16:05:30 2017][debug] Data directory: /usr/share/fusioninventory
[Mon Jul 24 16:05:30 2017][debug] Storage directory: /var/lib/fusioninventory
[Mon Jul 24 16:05:30 2017][debug] Lib directory: /usr/share/fusioninventory/lib
[Mon Jul 24 16:05:30 2017][debug] [target server0] Next server contact planned for Wed Jun 21 16:43:35 2017
[Mon Jul 24 16:05:30 2017][debug] Available tasks:
[Mon Jul 24 16:05:30 2017][debug] - ESX: 2.2.2
[Mon Jul 24 16:05:30 2017][debug] - Inventory: 1.1
[Mon Jul 24 16:05:30 2017][debug] - Collect: 2.4.0
[Mon Jul 24 16:05:30 2017][debug] - WakeOnLan: 2.1
[Mon Jul 24 16:05:30 2017][debug] - NetDiscovery: 2.2.2
[Mon Jul 24 16:05:30 2017][debug] - Deploy: 2.2
[Mon Jul 24 16:05:30 2017][debug] - NetInventory: 2.2.2
[Mon Jul 24 16:05:30 2017][debug] Planned tasks:
[Mon Jul 24 16:05:30 2017][debug] - ESX: 2.2.2
[Mon Jul 24 16:05:30 2017][debug] - Inventory: 1.1
[Mon Jul 24 16:05:30 2017][debug] - Collect: 2.4.0
[Mon Jul 24 16:05:30 2017][debug] - WakeOnLan: 2.1
[Mon Jul 24 16:05:30 2017][debug] - NetDiscovery: 2.2.2
[Mon Jul 24 16:05:30 2017][debug] - Deploy: 2.2
[Mon Jul 24 16:05:30 2017][debug] - NetInventory: 2.2.2
[Mon Jul 24 16:05:30 2017][debug] _runTarget
[Mon Jul 24 16:05:30 2017][debug] [http client] Using Compress::Zlib for compression
[Mon Jul 24 16:05:30 2017][info] sending prolog request to server server0
[Mon Jul 24 16:05:30 2017][error] [http client] communication error: 500 SSL negotiation failed:
[Mon Jul 24 16:05:30 2017][error] No answer from server at https://glpi.bbb.aaa/plugins/fusioninventory/





in the agent.cfg I switched debug to 1. Could I get more detailed debug ?



From the same client system I tried to run simple wget to the same server, but I get very similar error:

# wget https://glpi.bbb.aaa/plugins/fusioninventory/
--2017-07-24 15:45:23--  https://glpi.bbb.aaa/plugins/fusioninventory/
Resolving glpi.bbb.aaa... 10.xxx.xxx.xxx
Connecting to glpi.bbb.aaa|10.xxx.xxx.xxx|:443... connected.
OpenSSL: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group
OpenSSL: error:1408D010:SSL routines:SSL3_GET_KEY_EXCHANGE:EC lib
Unable to establish SSL connection.

Has anybody seen such error ?
What can I do about Fusioninventory agent  to improve this behavior ?

Thanks in advance

Offline

#2 2017-07-27 13:04:53

lecko
Member
Registered: 2017-07-24
Posts: 2

Re: SSL 500 Error on some Centos systems when communicating to GLPI server

After upgrading version of openssl library it owrks now. Before it was something like   1.0.1e-15.el6 , now it is
openssl.i686                               1.0.1e-57.el6               
openssl.x86_64                             1.0.1e-57.el6

Offline

Board footer

Powered by FluxBB