Seite 1 von 1

OPSI Depot SSLError NO_CERTIFICATE_OR_CRL_FOUND

Verfasst: 08 Apr 2025, 15:04
von Valentino-46
Hallo zusammen,

bei uns ist der Speicher eines OPSI Depots über Nacht vollgelaufen, möglicherweise hat das die Probleme verursacht.

Aktuell kann das Depot nämlich nicht mehr auf den OPSI Depotserver zugreifen und bringt ständig einen SSLError.

Wisst ihr wie man das "resetten" kann!?
Hier der Quellcode bei zb dem Befehl opsi-package-manager -l

Herzlichen Dank vorab,
Gruß Valentino

Code: Alles auswählen

root@opsi-sm:~# opsi-package-manager -l
[3] [2025-04-08 16:01:04.787] [               ] Opsi service verification error: HTTPSConnectionPool(host='opsi-wgt.xxxxx.local', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)')))   (opsipackagemanager.py:2110)
Traceback (most recent call last):
  File "urllib3/util/ssl_.py", line 438, in ssl_wrap_socket
ssl.SSLError: [X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "urllib3/connectionpool.py", line 787, in urlopen
  File "urllib3/connectionpool.py", line 488, in _make_request
  File "urllib3/connectionpool.py", line 464, in _make_request
  File "urllib3/connectionpool.py", line 1093, in _validate_conn
  File "urllib3/connection.py", line 741, in connect
  File "urllib3/connection.py", line 920, in _ssl_wrap_socket_and_match_hostname
  File "urllib3/util/ssl_.py", line 440, in ssl_wrap_socket
urllib3.exceptions.SSLError: [X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "requests/adapters.py", line 667, in send
  File "urllib3/connectionpool.py", line 841, in urlopen
  File "urllib3/util/retry.py", line 519, in increment
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='opsi-wgt.xxxxx.local', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "opsicommon/client/opsiservice.py", line 1231, in _request
  File "requests/sessions.py", line 589, in request
  File "requests/sessions.py", line 703, in send
  File "requests/adapters.py", line 698, in send
requests.exceptions.SSLError: HTTPSConnectionPool(host='opsi-wgt.xxxxx.local', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)')))

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "opsiutils/opsipackagemanager.py", line 2106, in main
  File "opsiutils/opsipackagemanager.py", line 1589, in __init__
  File "opsicommon/client/opsiservice.py", line 2273, in get_service_client
  File "opsicommon/client/opsiservice.py", line 1063, in connect
  File "opsicommon/client/opsiservice.py", line 1259, in _request
opsicommon.exceptions.OpsiServiceVerificationError: Opsi service verification error: HTTPSConnectionPool(host='opsi-wgt.xxxxx.local', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)')))

ERROR: Opsi service verification error: HTTPSConnectionPool(host='opsi-wgt.xxxxx.local', port=4447): Max retries exceeded with url: /rpc (Caused by SSLError(SSLError(136, '[X509: NO_CERTIFICATE_OR_CRL_FOUND] no certificate or crl found (_ssl.c:4329)')))

root@opsi-sm:~#

Re: OPSI Depot SSLError NO_CERTIFICATE_OR_CRL_FOUND

Verfasst: 16 Apr 2025, 09:34
von n.doerrer
Moin,
ich würde auf dem Depotserver erstmal ausreichend Platz schaffen, dann die Zertifikatsdateien löschen und den opsiconfd auf dem depot neustarten.
Das sollte das Zertifikat regenerieren.