search

wazuh / wazuh-packages

Wazuh - Tools for packages creation
https://wazuh.com
GNU General Public License v2.0
97 stars 89 forks source link

SSL Certificate Verification Failure when Downloading wazuh-agent.spec #2889

Closed Dwordcito closed 2 months ago

Dwordcito commented 3 months ago
Wazuh version Install type Action performed Platform
4.8.0 Agent Install/Upgrade/Remove Centos 5

Description

Currently, attempts to download the wazuh-agent.spec file using cURL encounter an SSL certificate verification failure. This issue prevents the successful retrieval of the file, which is essential for building RPM packages for the Wazuh agent in centos 5. The error message indicates a problem with verifying the legitimacy of the server's SSL certificate, resulting in a failed connection establishment.

Definition of Done

+ curl -L https://raw.githubusercontent.com/wazuh/wazuh-packages/4.8.0/rpms/SPECS/wazuh-agent.spec -o /downloaded_tmp_specs/wazuh-agent.spec
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed

  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
MarcelKemp commented 3 months ago

Update

Docker image generated locally. Testing that the image works correctly to upload it to AWS.

rafabailon commented 2 months ago

In the issue Release 4.8.0 - Beta 5 - Upgrade metrics this error has appeared again in CentOS 5. I have tried relaunching the pipeline without success.

I reopen the issue to review the error. I also leave the builds in case they are necessary in the investigation.

First Build:

Relaunch:

MarcelKemp commented 2 months ago

After researching it, the problem is in the jenkins repository, because the curl commands used for CentOS 5 lack the -k flag to avoid checking certificates. Therefore, I proceed to close this issue, as it is reflected in this other issue: