Project

General

Profile

Actions

Bug #14570

closed

Build openssl for Slackware, so the agent can update promises

Added by Félix DALLIDET almost 5 years ago. Updated almost 2 years ago.

Status:
Released
Priority:
N/A
Category:
Packaging
Target version:
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
User visibility:
Getting started - demo | first install | Technique editor and level 1 Techniques
Effort required:
Priority:
107
Name check:
Fix check:
Regression:

Description

Similar to #13690. On slackware 4-1-64 with an agent 5.0.9 and a debian9 server also in 5.0.9,

root@slackware-14-1-64:~# rudder agent run -ui                                                
Rudder agent 5.0.9.
Node uuid: 93e375c4-914e-49b0-98d2-c2aa3b3a6095
   error: Failed to establish TLS connection: (0 SSL_ERROR_SSL) tlsv1 alert decode error 
   error: No suitable server found
   error: Failed to establish TLS connection: (0 SSL_ERROR_SSL) tlsv1 alert decode error 
   error: No suitable server found
R: *********************************************************************************
* rudder-agent could not get an updated configuration from the policy server.   *
* This can be caused by:                                                        *
*   * an agent key that has been changed                                        *
*   * if this node is not accepted or deleted node on the Rudder root server    *
*   * if this node has changed policy server without sending a new inventory    *
* Any existing configuration policy will continue to be applied without change. *
*********************************************************************************
ok: Rudder agent promises were updated

and:

root@slackware-14-1-64:/opt/rudder# ldd /opt/rudder/bin/cf-agent | grep ssl
    libssl.so.1 => /lib/libssl.so.1 (0xb7445000)

The libssl used does not come with the agent and is too old to be compatible with the one of the server.


Related issues 1 (0 open1 closed)

Related to Rudder - Bug #13690: Impossible to update promises when using a debian9 or Ubuntu 18 server and older distributions as Nodes (incompatible openssl version)ReleasedAlexis MoussetActions
Actions

Also available in: Atom PDF