search

glpi-project / glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.
https://glpi-project.org
GNU General Public License v3.0
4.24k stars 1.29k forks source link

Strange issue with SSL connection from one computer #17989

Closed jackburton79 closed 3 weeks ago

jackburton79 commented 3 weeks ago

Code of Conduct

Is there an existing issue for this?

Version

GLPI Agent 1.10

Bug description

Since some days, the GLPI agent on ONE of the 100 computers we have here can't connect to the server. I tried installing the 1.11, uninstalling, reinstalling, but no change. It works correctly if I launch the network inventory manually from the commandline with an administrative account.

Relevant log output

When starting from the service:
[Wed Oct  2 08:50:47 2024][info] target server0: server https://assistenza.iacpud.local/front/inventory.php
[Wed Oct  2 08:50:47 2024][info] sending prolog request to server0
[Wed Oct  2 08:50:47 2024][error] [http client] internal response: 500 Can't connect to assistenza.iacpud.local:443 (certificate verify failed), SSL connect attempt failed error:0A000086:SSL routines::certificate verify failed
[Wed Oct  2 08:50:47 2024][error] No supported answer from server at https://assistenza.iacpud.local/front/inventory.php
[Wed Oct  2 08:50:47 2024][info] target server0: next run: Wed Oct  2 08:58:47 2024 - https://assistenza.iacpud.local/front/inventory.php
[Wed Oct  2 08:50:47 2024][info] GLPI Agent memory usage: WSS=3215360 PFU=124846080

This is the log when launched manually:
[Tue Oct  1 16:03:19 2024][debug] Logger backend File initialized
[Tue Oct  1 16:03:19 2024][debug] GLPI Agent (1.10)
[Tue Oct  1 16:03:19 2024][debug] Configuration directory: C:/Program Files/GLPI-Agent/etc
[Tue Oct  1 16:03:19 2024][debug] Data directory: C:/Program Files/GLPI-Agent/share
[Tue Oct  1 16:03:19 2024][debug] Storage directory: C:\Program Files\GLPI-Agent\var
[Tue Oct  1 16:03:19 2024][debug] Lib directory: C:/Program Files/GLPI-Agent/perl/agent
[Tue Oct  1 16:03:19 2024][debug] [target server0] Next server contact planned for Tue Oct  1 16:09:04 2024
[Tue Oct  1 16:03:19 2024][debug2] getAvailableTasks() : add of task Inventory version 1.17
[Tue Oct  1 16:03:19 2024][debug2] getAvailableTasks() : add of task RemoteInventory version 1.5
[Tue Oct  1 16:03:19 2024][debug2] Preparing execution plan
[Tue Oct  1 16:03:19 2024][debug] Available tasks:
[Tue Oct  1 16:03:19 2024][debug] - Inventory: 1.17
[Tue Oct  1 16:03:19 2024][debug] - RemoteInventory: 1.5
[Tue Oct  1 16:03:19 2024][debug] target server0: server https://assistenza.iacpud.local/front/inventory.php
[Tue Oct  1 16:03:19 2024][debug] No planned task for server0
[Tue Oct  1 16:03:19 2024][debug] Provided by Teclib Edition
[Tue Oct  1 16:03:19 2024][debug] Installer built on Tue Jul  9 09:42:07 2024 UTC
[Tue Oct  1 16:03:19 2024][debug] Built with Strawberry Perl 5.38.2
[Tue Oct  1 16:03:19 2024][debug] Built on github actions windows image for glpi-project/glpi-agent repository
[Tue Oct  1 16:03:19 2024][debug] Running in foreground mode
[Tue Oct  1 16:03:19 2024][info] server0 is not ready yet, but run is forced
[Tue Oct  1 16:03:19 2024][info] target server0: server https://assistenza.iacpud.local/front/inventory.php
[Tue Oct  1 16:03:19 2024][debug2] [http client] Using Compress::Zlib for compression
[Tue Oct  1 16:03:19 2024][info] sending prolog request to server0
[Tue Oct  1 16:03:19 2024][debug2] [http client] sending message:
<?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
  <DEVICEID>PC0040-2024-10-01-15-55-36</DEVICEID>
  <QUERY>PROLOG</QUERY>
  <TOKEN>12345678</TOKEN>
</REQUEST>
[Tue Oct  1 16:03:19 2024][debug] [http client] Updating keystore known certificates
[Tue Oct  1 16:03:19 2024][debug2] Changing to 'C:/Program Files/GLPI-Agent/var/keystore-export-byKOJe' temporary folder
[Tue Oct  1 16:03:19 2024][debug2] executing certutil -Silent -Split -Store CA
[Tue Oct  1 16:03:19 2024][debug2] executing certutil -Silent -Split -Store Root
[Tue Oct  1 16:03:19 2024][debug2] executing certutil -Silent -Split -Enterprise -Store CA
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -Silent -Split -Enterprise -Store Root
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -Silent -Split -GroupPolicy -Store CA
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -Silent -Split -GroupPolicy -Store Root
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -Silent -Split -User -Store CA
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -Silent -Split -User -Store Root
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 0119e81be9a14cd8e22f40ac118c687ecba3f4d8.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 012f35be4daa7e778ff84d94ef73d6214de60ee0.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 06add8688d147409b243347b654718558d19dd6f.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 06f1aa330b927b753a40e68cdf22e34bcbef3352.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 10963b9bb4b4b4488fba84f714386d6704ade300.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 109f1caed645bb78b3ea2b94c0697c740733031c.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 12cc6e8fef38e3d09fb11ce94b5e4bf4c0285a90.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 152b4ecb80095466b0a0ba6d59da32f6efaede58.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 18f7c1fcc3090203fd5baa2f861a754976c8dd25.crt temp.cer
[Tue Oct  1 16:03:20 2024][debug2] executing certutil -encode 245c97df7514e7cf2df8be72ae957b9e04741e85.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 31f9fc8ba3805986b721ea7295c65b3a44534274.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 3496a4e8b0dad0a2ce4b4a9554b2b2f87ef3e4c2.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 3b1efd3a66ea28b16697394703a72ca340a05bd5.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 6d64e789527e82a898e898cb3539721abed3fe4b.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 76594a513e85182befe87f234ea5764dd9d2a8ad.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 793c406beea557e5da383217ace2e16ce3112443.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 7b0f360b775f76c94a12ca48445aa2d2a875701c.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 7f88cd7223f3c813818c994614a89c99fa3b5247.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 86192756cbcf1c79ca1656970f6e65b1dee85f33.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 8f43288ad272f3103b6fb1428485ea3014c0bcfe.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode 92b46c76e13054e104f230517e6e504d43ab10b5.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode a3ed0d5c723183053924709cfc8ef4cb02d1afe1.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode a43489159a520f0d93d032ccaf37e7fe20a8b419.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode abcad4a4f9c194f3a670ef6e978f8846425b196d.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode abce94bfd05577aae44abdd32cc582a1e5fb190e.crt temp.cer
[Tue Oct  1 16:03:21 2024][debug2] executing certutil -encode be36a4562fb2ee05dbb3d32323adf445084ed656.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode cdd4eeae6000ac7f40c3802c171e30148030c072.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode d4ffdb19ba590fffaa34db5f4b568706a2978436.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode d559a586669b08f46a30a133f8a9ed3d038e2ea8.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode e7b2c4c60a41f1d54c7d664fb87b5b4619df0348.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode e87749c07f4066fa484dd0a5377d6feff0aa1f23.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode e962e8a9f0b3adc6185aec7c3be405ef410eab46.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode f09da8cc6ab63a04cda04cba5113ceb74b3b4313.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] executing certutil -encode fee449ee0e3965a5246f000e87fde2a065fd89d4.crt temp.cer
[Tue Oct  1 16:03:22 2024][debug2] Changing back to 'C:/Program Files/GLPI-Agent' folder
[Tue Oct  1 16:03:23 2024][debug2] format: Zlib
[Tue Oct  1 16:03:23 2024][debug2] [http client] receiving message:
{"expiration":"24","status":"ok"}
[Tue Oct  1 16:03:23 2024][info] server0 answer shows it supports GLPI Agent protocol

Page URL

No response

Steps To reproduce

No response

Your GLPI setup information

No response

Anything else?

We have an internal CA, and we distribute the certificate on all computers via GPO. I can confirm the certificate is installed on the computer.

github-actions[bot] commented 3 weeks ago

This issue has been closed as we only track bugs here.

You can get community support on forums or you can consider taking a subscription to get professional support. You can also contact GLPI editor team directly.