search

voxpupuli / puppet-zabbix

Puppet module for creating and maintaining zabbix components with puppet.
https://forge.puppet.com/puppet/zabbix
Apache License 2.0
80 stars 228 forks source link

Keychain for Zabbix repo certificate verify failed #800

Closed cypheru closed 2 years ago

cypheru commented 2 years ago

Affected Puppet, Ruby, OS and module versions/distributions

How to reproduce (e.g Puppet code you use)

Puppet code is part of puppet-zabbix

What are you seeing

SSL_connect returned=1 errno=0 state=error: certificate verify failed

What behaviour did you expect instead

Expected puppet to put keys on node

Output log

Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Wrapped exception:
SSL_connect returned=1 errno=0 state=error: certificate verify failed
Error: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-FBABD5F]/Apt_key[zabbix-FBABD5F]/ensure: change from 'absent' to 'present' failed: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Notice: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-FBABD5F]/Anchor[apt_key FBABD5FB20255ECAB22EE194D13D58E479EA5ED4 present]: Dependency Apt_key[zabbix-FBABD5F] has failures: true
Warning: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-FBABD5F]/Anchor[apt_key FBABD5FB20255ECAB22EE194D13D58E479EA5ED4 present]: Skipping because of failed dependencies
Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Error: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Wrapped exception:
SSL_connect returned=1 errno=0 state=error: certificate verify failed
Error: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-A1848F5]/Apt_key[zabbix-A1848F5]/ensure: change from 'absent' to 'present' failed: Could not set 'present' on ensure: SSL_connect returned=1 errno=0 state=error: certificate verify failed (file: /etc/puppetlabs/code/environments/git_branch/modules-thirdparty/apt/manifests/key.pp, line: 51)
Notice: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-A1848F5]/Anchor[apt_key A1848F5352D022B9471D83D0082AB56BA14FE591 present]: Dependency Apt_key[zabbix-A1848F5] has failures: true
Warning: /Stage[main]/Zabbix::Repo/Apt::Key[zabbix-A1848F5]/Anchor[apt_key A1848F5352D022B9471D83D0082AB56BA14FE591 present]: Skipping because of failed dependencies

This used to work it and has only been recently, that we have have started experiencing this error

kenyon commented 2 years ago

Note that we aren't supporting Ubuntu 16.04 and Puppet 5 anymore because they are EOL (although this module still lists Ubuntu 16.04 support, it will likely be removed soon).

root-expert commented 2 years ago

@cypheru This is probably related to the expiration of Letsencrypt's root certificate.

Have you tried updating ca-certificates package? Maybe that will fix it. Doesn't seems related to this module though.

cypheru commented 2 years ago

Agreed it isn't related to the module, and is the lets encrypt root certificate expiring. Closing this Issue