Welcome to OCS Inventory NG community support, where you can ask questions and receive answers from other members of the community.

Please ask questions only in English or French.

Release 2.5 available

The official documentation can be found on http://wiki.ocsinventory-ng.org. Read it before asking your question.

Package deploy via HTTPS

Hi,
I want to create a package that will be distributed to agents via HTTPS. In menu: Pakage -> Create pakage, at the protocol I only have to choose HTTP. My agents connect to the server via HTTP even though they have a valid certificate.
What is the problem?

Sorry for my bad english.

Regards,

Grzegorz

 

Log file:

DOWNLOAD => Package <1409816253> verified and added to process queue
    DOWNLOAD => Verifying package <C:\ProgramData\OCS Inventory NG\Agent\download\1409833305>
DOWNLOAD => Package <1409833305> verified and added to process queue
    DOWNLOAD => Processing packages for cycle 1 on Monday, September 08, 2014 12:23:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 2 on Monday, September 08, 2014 12:24:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 3 on Monday, September 08, 2014 12:25:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 4 on Monday, September 08, 2014 12:26:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 5 on Monday, September 08, 2014 12:27:31
DOWNLOAD => Downloading package fragment <1409816253-1>
    COM SERVER => Initializing cURL library for getFile
    COM SERVER => Using cURL without server authentication
    COM SERVER => Disabling cURL proxy support
    COM SERVER => Enabling cURL SSL server validation support using CA Bundle <cacert.pem>
    COM SERVER => Sending fileGet request to URL <HTTP://192.168.7.10/download/1409816253/1409816253-1>
    WARNING *** COM SERVER => Failed to send HTTP Get request <Couldn't connect to server>
    COM SERVER => Cleaning cURL library

Agent version: 2.1.2

Server version: 2.1.2

asked in OCS Inventory NG server for Unix by (280 points)

1 Answer

0 votes
Hi,

Post content of apache error log file.
answered by (63.8k points)

Ocsinventory.log:

AGENT => Inventory successfully sent
    INVENTORY => Writing new inventory state
AGENT =>  Communication Server ask for Package Download
    DOWNLOAD => Package history file cleaning not required
    DOWNLOAD => Metadata file <info> for package <1410260714> is located at <https://ocstst/download/1410260714/info>
    COM SERVER => Initializing cURL library for getFile
    COM SERVER => Using cURL without server authentication
    COM SERVER => Disabling cURL proxy support
    COM SERVER => Enabling cURL SSL server validation support using CA Bundle <C:\ProgramData\OCS Inventory NG\Agent\cacert.pem>
    COM SERVER => Sending fileGet request to URL <https://ocstst/download/1410260714/info>
    COM SERVER => fileGet response received <HTTP Status Code #200>
    COM SERVER => Cleaning cURL library
    DOWNLOAD => Unloading communication provider
ERROR *** DOWNLOAD => Can't register package <1410260714> into Registry
DOWNLOAD => Download and setup tool successfully started
AGENT => Unloading communication provider
AGENT => Unloading plug-in(s)
AGENT => Execution duration: 00:00:10.

download.log:

COM SERVER => Initializing cURL library for getFile
    COM SERVER => Using cURL without server authentication
    COM SERVER => Disabling cURL proxy support
    COM SERVER => Enabling cURL SSL server validation support using CA Bundle <cacert.pem>
    COM SERVER => Sending fileGet request to URL <HTTP://192.168.7.10/download/1409833305/1409833305-1>
    WARNING *** COM SERVER => Failed to send HTTP Get request <Couldn't connect to server>
    COM SERVER => Cleaning cURL library

ssl_error log:

[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate CommonName (CN) `ocstst' does NOT match server name!?
[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate CommonName (CN) `ocstst' does NOT match server name!?
 

 

I do not know why download tool trying connect to 192.168.7.10 (the IP is fine, but when I create a pakage, I type https://ocstst /download / ....)

 

 
Variable DOWNLOAD_URI_FRAG can only use http addresses, it is a bug or ocs can't download files via https?

 

 
Powered by Question2Answer
...