Problem deploying wapt 1.5 package

[Elminio]

Hello everyone,
Since upgrading the wapt server to 1.5.1.21 on a 2008 R2 server, I have been experiencing difficulties deploying wapt packages.

I am getting the following error:

Code: Select all

"C:\wapt\lib\site-packages\urllib3\connectionpool.py:858: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings InsecureRequestWarning)".

In the preferences:
For the path to the CA bundle, I used "retrieve certificate server" which automatically retrieves the certificate from:

Code: Select all

c:\users\nom_profil\appdata\roaming\waptconsole\ssl\server\nom_du_certificat.crt

=> Why this path?

And for the path to the personal certificate, I have c:\private\certificate_name.crt

Otherwise, I have a package with numbers (host sections) that is trying to install itself!

Regards,
Elminio

[agauvrit]

Good morning,

Two things need to be distinguished:

• The SSL/TLS certificate of the nginx web server, which ensures a reliable and secure connection between the agent and the server.
• The Code-Signing certificate that allows verification of the authenticity of packets deployed by the WAPT agent

Your first problem concerns the server's SSL/TLS certificate, which is most likely the self-signed certificate generated during the agent's post-configuration.

If you wish to use a valid SSL/TLS certificate, please follow the procedure described in the documentation: https://www.wapt.fr/fr/doc/Installation ... ec-windows

Otherwise, I have a package with numbers (host sections) that is trying to install itself!

It's in the documentation: https://www.wapt.fr/fr/doc/waptserver_u ... d-du-poste

Alexander

[Elminio]

For my first problem, I disabled HTTPS server certificate verification and removed the path to the CA bundle.
For my second problem, which is really blocking, all the packages are signed, and I followed the documentation during the migration.
I'm getting an exception for all packages during installation or update.
Elminio.

[sfonteneau]

Was the command to resign the packages and migrate the machines executed in an administrator command prompt?

[Elminio]

The command was successfully applied as administrator.
My groups and packages are correctly signed with the same personal certificate.
I manually install the WAPT agent on a machine, launch a package installation, and encounter an exception.

Elminio.

[sfonteneau]

Can you specify the exception?

[Elminio]

Exception: Error during installation
And in debug I have this:

Code: Select all

Installing deploiement-ultravnc
Installing deploiement-plugin_net
Installing 1-bureautique
Installing 4C4C4544-0051-5810-8036-C6C04F353332
Exception: Erreur lors de l'installation de 4C4C4544-0051-5810-8036-C6C04F353332 (=15): erreurs dans les paquets [[u'deploiement-ultravnc', PackageEntry('deploiement-ultravnc','1.2.1.2-1') ], [u'deploiement-plugin_net', PackageEntry('deploiement-plugin_net','1.2-0') ], [u'1-bureautique', PackageEntry('1-bureautique','28') ], [u'4C4C4544-0051-5810-8036-C6C04F353332 (=15)', PackageEntry('4C4C4544-0051-5810-8036-C6C04F353332','15') ]]
Traceback (most recent call last):
  File "C:\Program Files (x86)\wapt\waptservice\waptservice.py", line 1151, in run
    self.running_task.run()
  File "C:\Program Files (x86)\wapt\waptservice\waptservice_common.py", line 405, in pwrapper
    return func(*arg, **kwargs)
  File "C:\Program Files (x86)\wapt\waptservice\waptservice_common.py", line 464, in run
    self._run()
  File "C:\Program Files (x86)\wapt\waptservice\waptservice_common.py", line 884, in _run
    self.result.get('errors',[])))
Exception: Erreur lors de l'installation de 4C4C4544-0051-5810-8036-C6C04F353332 (=15): erreurs dans les paquets [[u'deploiement-ultravnc', PackageEntry('deploiement-ultravnc','1.2.1.2-1') ], [u'deploiement-plugin_net', PackageEntry('deploiement-plugin_net','1.2-0') ], [u'1-bureautique', PackageEntry('1-bureautique','28') ], [u'4C4C4544-0051-5810-8036-C6C04F353332 (=15)', PackageEntry('4C4C4544-0051-5810-8036-C6C04F353332','15') ]]

[beemoon]

If you installed the agents manually, check the wapt-get.ini file on the clients. Mine didn't have the correct settings, especially the verify_cert;
I had to deploy a working wapt-get.ini file on the machines and restart them.

[Elminio]

I performed a complete reinstallation of the server and I get this message:
root:ERROR for C:\private\wapt-private.pem: Unable to load key C:\private\wapt-private.pem
when I try to deploy a package in debug mode.

[Elminio]

beemoon,

here is the wapt-get.ini config on the workstations:

[global]
repo_url=https://serveur.wapt/wapt
send_usage_report=1
use_hostpackages=1
wapt_server=https://serveur.wapt
use_kerberos=0
check_certificates_validity=1
verify_cert=0
dnsdomain=
max_gpo_script_wait=180
pre_shutdown_timeout=180
hiberboot_enabled=0
[wapt-templates]
repo_url=https://store.wapt.fr/wapt
verify_cert=1