Package deploy via HTTPS

Question

Hi,
I want to create a package that will be distributed to agents via HTTPS. In menu: Pakage -> Create pakage, at the protocol I only have to choose HTTP. My agents connect to the server via HTTP even though they have a valid certificate. What is the problem?

Sorry for my bad english.

Regards,

Grzegorz

 

Log file:

DOWNLOAD => Package <1409816253> verified and added to process queue
    DOWNLOAD => Verifying package <C:\ProgramData\OCS Inventory NG\Agent\download\1409833305>
DOWNLOAD => Package <1409833305> verified and added to process queue
    DOWNLOAD => Processing packages for cycle 1 on Monday, September 08, 2014 12:23:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 2 on Monday, September 08, 2014 12:24:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 3 on Monday, September 08, 2014 12:25:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 4 on Monday, September 08, 2014 12:26:31
    DOWNLOAD => Pausing for cycle latency (60 seconds)
    DOWNLOAD => Processing packages for cycle 5 on Monday, September 08, 2014 12:27:31
DOWNLOAD => Downloading package fragment <1409816253-1>
    COM SERVER => Initializing cURL library for getFile
    COM SERVER => Using cURL without server authentication
    COM SERVER => Disabling cURL proxy support
    COM SERVER => Enabling cURL SSL server validation support using CA Bundle <cacert.pem>
    COM SERVER => Sending fileGet request to URL <HTTP://192.168.7.10/download/1409816253/1409816253-1>
    WARNING *** COM SERVER => Failed to send HTTP Get request <Couldn't connect to server>
    COM SERVER => Cleaning cURL library

Agent version: 2.1.2

Server version: 2.1.2

Answer 1

Hi,

Post content of apache error log file.

Comments

Ocsinventory.log:

AGENT => Inventory successfully sent
    INVENTORY => Writing new inventory state
AGENT =>  Communication Server ask for Package Download
    DOWNLOAD => Package history file cleaning not required
    DOWNLOAD => Metadata file <info> for package <1410260714> is located at <https://ocstst/download/1410260714/info>
    COM SERVER => Initializing cURL library for getFile
    COM SERVER => Using cURL without server authentication
    COM SERVER => Disabling cURL proxy support
    COM SERVER => Enabling cURL SSL server validation support using CA Bundle <C:\ProgramData\OCS Inventory NG\Agent\cacert.pem>
    COM SERVER => Sending fileGet request to URL <https://ocstst/download/1410260714/info>
    COM SERVER => fileGet response received <HTTP Status Code #200>
    COM SERVER => Cleaning cURL library
    DOWNLOAD => Unloading communication provider
ERROR *** DOWNLOAD => Can't register package <1410260714> into Registry
DOWNLOAD => Download and setup tool successfully started
AGENT => Unloading communication provider
AGENT => Unloading plug-in(s)
AGENT => Execution duration: 00:00:10.

download.log:

COM SERVER => Initializing cURL library for getFile
    COM SERVER => Using cURL without server authentication
    COM SERVER => Disabling cURL proxy support
    COM SERVER => Enabling cURL SSL server validation support using CA Bundle <cacert.pem>
    COM SERVER => Sending fileGet request to URL <HTTP://192.168.7.10/download/1409833305/1409833305-1>
    WARNING *** COM SERVER => Failed to send HTTP Get request <Couldn't connect to server>
    COM SERVER => Cleaning cURL library

ssl_error log:

[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate CommonName (CN) `ocstst' does NOT match server name!?
[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Sep 09 13:12:16 2014] [warn] RSA server certificate CommonName (CN) `ocstst' does NOT match server name!?
 

 

I do not know why download tool trying connect to 192.168.7.10 (the IP is fine, but when I create a pakage, I type https://ocstst /download / ....)

 

---

 

Variable DOWNLOAD_URI_FRAG can only use http addresses, it is a bug or ocs can't download files via https?