Project

General

Profile

Actions

Bug #9468

closed

Minicurl fails for https connections

Bug #9468: Minicurl fails for https connections

Added by Janos Mattyasovszky about 9 years ago. Updated about 7 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
-
Category:
System integration
Target version:
Severity:
Major - prevents use of part of Rudder | no simple workaround
UX impact:
User visibility:
Operational - other Techniques | Technique editor | Rudder settings
Effort required:
Priority:
0
Name check:
Fix check:
Regression:

Description

Hi,

When curl is not available, minicurl should handle the transport of the inventory. However, LWP seems to miss the SSL crypto stuff from the build-in modules:

/opt/rudder/bin/rudder-perl /var/rudder/cfengine-community/inputs/common/utilities/minicurl --debug --no-verify --get --file "/var/rudder/cfengine-community/rudder-server-uuid.txt" --url https://rudder.fqdn/uuid
FAILED (501 Protocol scheme 'https' is not supported (Crypt::SSLeay or IO::Socket::SSL not installed))

Since Rudder has changed the default transport to https, this fails on a freshly installed agent out-of-the-box on the first update (given curl is not present).

Found in: rudder-agent-3.1.13.release-1.SLES.12.x86_64


Related issues 1 (0 open1 closed)

Related to Rudder - Bug #6831: Use HTTP for inventory handling on AIX to prevent minicurl errorsReleasedBenoît PECCATTEActions

Updated by Matthieu CERDA about 9 years ago Actions #1

  • Related to Bug #6831: Use HTTP for inventory handling on AIX to prevent minicurl errors added

Updated by Janos Mattyasovszky about 9 years ago Actions #2

  • Description updated (diff)

Updated by Benoît PECCATTE over 8 years ago Actions #3

  • Category set to System integration
  • Target version set to 3.1.19

Updated by Benoît PECCATTE over 8 years ago Actions #4

  • Severity set to Major - prevents use of part of Rudder | no simple workaround
  • User visibility set to Operational - other Techniques | Technique editor | Rudder settings
  • Priority set to 34

Updated by Vincent MEMBRÉ over 8 years ago Actions #5

  • Target version changed from 3.1.19 to 3.1.20
  • Priority changed from 34 to 33

Updated by Vincent MEMBRÉ over 8 years ago Actions #6

  • Target version changed from 3.1.20 to 3.1.21

Updated by Vincent MEMBRÉ over 8 years ago Actions #7

  • Target version changed from 3.1.21 to 3.1.22
  • Priority changed from 33 to 32

Updated by Benoît PECCATTE over 8 years ago Actions #8

  • Priority changed from 32 to 46

Updated by Vincent MEMBRÉ over 8 years ago Actions #9

  • Target version changed from 3.1.22 to 3.1.23
  • Priority changed from 46 to 45

Updated by Vincent MEMBRÉ about 8 years ago Actions #10

  • Target version changed from 3.1.23 to 3.1.24
  • Priority changed from 45 to 44

Updated by Vincent MEMBRÉ about 8 years ago Actions #11

  • Target version changed from 3.1.24 to 3.1.25
  • Priority changed from 44 to 43

Updated by Vincent MEMBRÉ almost 8 years ago Actions #12

  • Target version changed from 3.1.25 to 387

Updated by Vincent MEMBRÉ almost 8 years ago Actions #13

  • Target version changed from 387 to 4.1.10

Updated by Vincent MEMBRÉ over 7 years ago Actions #14

  • Target version changed from 4.1.10 to 4.1.11

Updated by Vincent MEMBRÉ over 7 years ago Actions #15

  • Target version changed from 4.1.11 to 4.1.12

Updated by Vincent MEMBRÉ over 7 years ago Actions #16

  • Target version changed from 4.1.12 to 4.1.13

Updated by Vincent MEMBRÉ over 7 years ago Actions #17

  • Target version changed from 4.1.13 to 4.1.14

Updated by Benoît PECCATTE over 7 years ago Actions #18

  • Target version changed from 4.1.14 to 4.1.15

Updated by Vincent MEMBRÉ about 7 years ago Actions #19

  • Target version changed from 4.1.15 to 4.1.16

Updated by Vincent MEMBRÉ about 7 years ago Actions #20

  • Target version changed from 4.1.16 to 4.1.17

Updated by François ARMAND about 7 years ago Actions #21

  • Status changed from New to Rejected
  • Priority changed from 43 to 0

We won't make minicurl https-enable (we tried and failed hardly, and the maintenance cost is prohibitive). We will embed curl+openssl on plateform that currently use minicurl.

I'm closing that ticket, but if you have an use case where minicurl would be better than an embeded curl+openssl, please reopen it!

Actions

Also available in: PDF Atom