Seite 1 von 1

[GELÖST] opsiconfd startet nach Upgrade nicht

Verfasst: 20 Nov 2019, 10:07
von friedhelm
Juten Tach,

der opsiconfd startet nach dem Upgrade auf 4.1 unter Debian 10 nicht mehr.

Im Log-File ist eine Auffälligkeit:

Code: Alles auswählen

==================================================================
=             opsi configuration service starting                =
================================================================== (Logger.py|888)
[5] [Nov 20 09:43:52] Creating pid file u'/var/run/opsiconfd/opsiconfd.pid' (opsiconfd.py|513)
[5] [Nov 20 09:43:52] Starting opsiconfd main thread (opsiconfd.py|344)
[5] [Nov 20 09:43:52] Added static content '/' which points to directory '/usr/share/opsiconfd/static' (opsiconfd.py|217)
[5] [Nov 20 09:43:52] Running on depot server 'opsiserver.stagetec.com', exporting repository directory (opsiconfd.py|233)
[5] [Nov 20 09:43:52] Running on depot server 'opsiserver.stagetec.com', exporting depot directory (opsiconfd.py|246)
[5] [Nov 20 09:43:52] Added webdav content 'repository' which points to directory '/var/lib/opsi/repository' () (opsiconfd.py|279)
[5] [Nov 20 09:43:52] Added webdav content 'depot' which points to directory '/var/lib/opsi/depot' () (opsiconfd.py|279)
[5] [Nov 20 09:43:52] Added webdav content 'configed' which points to directory '/usr/lib/configed' (u'noauth',) (opsiconfd.py|279)
[5] [Nov 20 09:43:52] Uptime: 0:00:02.248739 (opsiconfd.py|365)
[5] [Nov 20 09:43:52] Statistics:  (opsiconfd.py|367)
[5] [Nov 20 09:43:52] Methodname        Callcount       Average processing duration (opsiconfd.py|368)
[2] [Nov 20 09:43:52] Traceback: (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/opsiconfd/opsiconfd.py", line 351, in run
    self._startListening()
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/opsiconfd/opsiconfd.py", line 286, in _startListening
    self._startListeningHTTPS()
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/opsiconfd/opsiconfd.py", line 322, in _startListeningHTTPS
    sslContext
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/twisted/internet/posixbase.py", line 521, in listenSSL
    tlsFactory = tls.TLSMemoryBIOFactory(contextFactory, False, factory)
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/twisted/protocols/tls.py", line 773, in __init__
    contextFactory = _ContextFactoryToConnectionFactory(contextFactory)
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/twisted/protocols/tls.py", line 651, in __init__
    oldStyleContextFactory.getContext()
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/OPSI/Service/__init__.py", line 71, in getContext
    context.use_certificate_file(self._sslServerCertFile)
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/OpenSSL/SSL.py", line 930, in use_certificate_file
    _raise_current_error()
 (Logger.py|798)
[2] [Nov 20 09:43:52]   File "/usr/lib/python2.7/dist-packages/OpenSSL/_util.py", line 54, in exception_from_error_queue
    raise exception_type(errors)
 (Logger.py|798)
[2] [Nov 20 09:43:52]      ==>>> [('SSL routines', 'ssl_do_config', 'bad value'), ('SSL routines', 'SSL_CTX_use_certificate', 'ee key too small')] (opsiconfd.py|356)
[5] [Nov 20 09:43:52] Stopping opsiconfd main thread (opsiconfd.py|120)
[5] [Nov 20 09:43:52] Deleting all sessions (Session.py|240)
[5] [Nov 20 09:43:52] Opsiconfd main thread exiting... (opsiconfd.py|359)
Was ist zu tun?

Vielen Dank und viele Grüße!

Friedhelm

Re: opsiconfd startet nach Upgrade nicht

Verfasst: 20 Nov 2019, 11:21
von ThomasT
Ich würde es mal mit

Code: Alles auswählen

opsi-setup --renew-opsiconfd-cert
oder

Code: Alles auswählen

opsi-setup --init-current-config
probieren.

Re: opsiconfd startet nach Upgrade nicht

Verfasst: 20 Nov 2019, 12:22
von friedhelm
Morjen Thomas,

das war es.

Code: Alles auswählen

opsi-setup --renew-opsiconfd-cert
hat es gebracht.

Vielen Dank für die schnelle Antwort!

Herzliche Grüße aus Berlin

Friedhelm