glpi-agent icon indicating copy to clipboard operation
glpi-agent copied to clipboard

NetDiscovery fails: Failed to add certificate to CA store error:0588000B:x509 certificate routines::X509 lib

Open silhusk opened this issue 7 months ago • 26 comments

Bug reporting acknowledgment

Yes, I read it

Professional support

Yes, I know

Describe the bug

The NetDiscovery task causes the following error:

[error] [http client] internal response: 500 Can't connect to glpi.domain:443, Failed to add certificate to CA store error:0588000B:x509 certificate routines::X509 lib

It seems to crash, and the error message is not always printed. Sometimes it just stops with

[Fri Jul 19 09:28:57 2024][debug2] [http client OCS] sending message:
<?xml version="1.0" encoding="UTF-8"?>
<REQUEST>
  <CONTENT>
    <AGENT>
      <AGENTVERSION>1.9</AGENTVERSION>
      <START>1</START>
    </AGENT>
    <MODULEVERSION>6.2</MODULEVERSION>
    <PROCESSNUMBER>429</PROCESSNUMBER>
  </CONTENT>
  <DEVICEID>REDACTED</DEVICEID>
  <QUERY>NETDISCOVERY</QUERY>
</REQUEST>

The full log with the error: glpi-agent_error.log With --no-ssl-check version 1.9 works fine: glpi-agent_no-ssl-check.log. Version 1.10 doesn't work, even with --no-ssl-check, and doesn't print any error.

Other tasks (collect, deploy) are working correctly.

To reproduce

  1. prepare a NetDiscovery task
  2. glpi-agent.exe --force --debug --debug --task=NetDiscovery

Expected behavior

  • The whole IP range is scanned
  • Results are sent to the server
  • The task is either failed or completed, but is not left in the executing state

Operating system

Windows

GLPI Agent version

1.9

GLPI version

10.0.16

GLPIInventory plugin or other plugin version

GLPI Inventory v1.3.5

silhusk avatar Jul 22 '24 14:07 silhusk