Repo lässt sich nicht installieren (Produkte bereitstellen)

Antworten
Vincent_05
Beiträge: 12
Registriert: 21 Mär 2024, 09:16

Repo lässt sich nicht installieren (Produkte bereitstellen)

Beitrag von Vincent_05 »

Guten Abend,
irgendwie lassen sich die repo Produkte nicht einspielen. Wenn ich versuche ein Repo (in meinem Fall uib.windows repo) zu installieren, bekomme ich folgende fehlermeldung, nachdem ich den Befehl

Code: Alles auswählen

opsi-package-updater -v --repo uib_windows install
ausgeführt habe:

Code: Alles auswählen

[3] [2024-04-09 21:31:20.048] [               ] Opsi service verification error: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))   (opsipackageupdater.py:457)
Traceback (most recent call last):
  File "urllib3/connectionpool.py", line 467, in _make_request
  File "urllib3/connectionpool.py", line 1099, in _validate_conn
  File "urllib3/connection.py", line 653, in connect
  File "urllib3/connection.py", line 806, in _ssl_wrap_socket_and_match_hostname
  File "urllib3/util/ssl_.py", line 465, in ssl_wrap_socket
  File "urllib3/util/ssl_.py", line 509, in _ssl_wrap_socket_impl
  File "ssl.py", line 517, in wrap_socket
  File "ssl.py", line 1104, in _create
  File "ssl.py", line 1382, in do_handshake
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "urllib3/connectionpool.py", line 793, in urlopen
  File "urllib3/connectionpool.py", line 491, in _make_request
urllib3.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "requests/adapters.py", line 486, in send
  File "urllib3/connectionpool.py", line 847, in urlopen
  File "urllib3/util/retry.py", line 515, in increment
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "opsicommon/client/opsiservice.py", line 949, in _request
  File "requests/sessions.py", line 589, in request
  File "requests/sessions.py", line 703, in send
  File "requests/adapters.py", line 517, in send
requests.exceptions.SSLError: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "opsiutils/opsipackageupdater.py", line 453, in main
  File "opsiutils/opsipackageupdater.py", line 420, in updater_main
  File "opsiutils/update_packages/Updater.py", line 118, in __init__
  File "opsiutils/update_packages/Updater.py", line 185, in getConfigBackend
  File "opsiutils/__init__.py", line 89, in get_service_client
  File "opsicommon/client/opsiservice.py", line 780, in connect
  File "opsicommon/client/opsiservice.py", line 977, in _request
opsicommon.exceptions.OpsiServiceVerificationError: Opsi service verification error: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))
ERROR: Opsi service verification error: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))
lässt sich aus diesem fehlercode etwas erschließen?


Das gleich passiert aber auch, wenn ich versuche nur einzelne Pakete wie den client agent oder hwaudit zu installieren:

Code: Alles auswählen

[3] [2024-04-09 21:36:35.943] [               ] Opsi service verification error: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))   (opsipackageupdater.py:457)
Traceback (most recent call last):
  File "urllib3/connectionpool.py", line 467, in _make_request
  File "urllib3/connectionpool.py", line 1099, in _validate_conn
  File "urllib3/connection.py", line 653, in connect
  File "urllib3/connection.py", line 806, in _ssl_wrap_socket_and_match_hostname
  File "urllib3/util/ssl_.py", line 465, in ssl_wrap_socket
  File "urllib3/util/ssl_.py", line 509, in _ssl_wrap_socket_impl
  File "ssl.py", line 517, in wrap_socket
  File "ssl.py", line 1104, in _create
  File "ssl.py", line 1382, in do_handshake
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "urllib3/connectionpool.py", line 793, in urlopen
  File "urllib3/connectionpool.py", line 491, in _make_request
urllib3.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "requests/adapters.py", line 486, in send
  File "urllib3/connectionpool.py", line 847, in urlopen
  File "urllib3/util/retry.py", line 515, in increment
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "opsicommon/client/opsiservice.py", line 949, in _request
  File "requests/sessions.py", line 589, in request
  File "requests/sessions.py", line 703, in send
  File "requests/adapters.py", line 517, in send
requests.exceptions.SSLError: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "opsiutils/opsipackageupdater.py", line 453, in main
  File "opsiutils/opsipackageupdater.py", line 420, in updater_main
  File "opsiutils/update_packages/Updater.py", line 118, in __init__
  File "opsiutils/update_packages/Updater.py", line 185, in getConfigBackend
  File "opsiutils/__init__.py", line 89, in get_service_client
  File "opsicommon/client/opsiservice.py", line 780, in connect
  File "opsicommon/client/opsiservice.py", line 977, in _request
opsicommon.exceptions.OpsiServiceVerificationError: Opsi service verification error: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))
ERROR: Opsi service verification error: HTTPSConnectionPool(host='localhost', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1006)')))
Nach oben
Benutzeravatar
j.schneider
uib-Team
Beiträge: 1821
Registriert: 29 Mai 2008, 15:14

Re: Repo lässt sich nicht installieren (Produkte bereitstellen)

Beitrag von j.schneider »

Hallo,

sieht aus, als wäre die Zeit auf dem opsi-Server falsch (gewesen).
Bitte einmal testen, ob

Code: Alles auswählen

date
die richtige Zeit liefert.
Auch die Zeitsynchronisation prüfen:

Code: Alles auswählen

systemctl status systemd-timesyncd
Und einen Health-Check durchführen.

Code: Alles auswählen

opsiconfd health-check
Wenn die Zeit auf dem Server stimmt, reicht wahrscheinlich ein Neustart des opsiconfd um die Zertifikate zu "reparieren".

Code: Alles auswählen

systemctl restart opsiconfd
Grüße
Jan Schneider
Nach oben
Antworten

Zurück zu „Freier Support“