Re: Problem ssl in secure_cp
"'Craig Comstock' via help-cfengine" <[email protected]>
| Newsgroups | gmane.comp.sysutils.cfengine.general |
|---|---|
| Message-ID | <CAMDw=qGZX6auNAu=B=8=-csj0mtiMLk9BUV4UV5VwC0pG-mwdw@mail.gmail.com> |
Hi Thierry, Sorry to see you are having an issue. To get an idea of sequence of events, can you run cf-agent and cf-serverd with timestamps enabled (--timestamp option)? Also, can you mention the platforms involved and versions of cfengine involved? I am trying a similar policy out now to see if it works for me on some debian 11 hosts with community 3.21.0 packages. Thanks, Craig On Tue, Jan 10, 2023 at 9:22 AM thierry thunot <[email protected]> wrote: > > Hello everyone, > I'll tell you about the problem I just encountered. > For my work, I want to copy a file of a substantial size 2 or 3GB in > secure_cp from a cfengine server to a cfengine client. > For this example i took a debian iso image. > > The file is well copied on the client, its MD5 is good compared to the > source file but its name is followed by a .cfnew . > > the promise is a simple copy from example: > { > ...... > Files: > "/root/debian-11.2.0-amd64-DVD-1.iso" > copy_from => > secure_cp("/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso","$(sys.policy_hub)"), > comment => "Copie archive ISO ##################"; > ...} > > > the client log about my problem: > > verbose: P: BEGIN promise 'promise_app_softs_nextcloud_cf_442' of type > "files" (pass 1) > verbose: P: Promiser/affected object: > '/root/debian-11.2.0-amd64-DVD-1.iso' > verbose: P: Part of bundle: installation_nextcloud > verbose: P: Base context class: > !trt_lx_nextcloud_si_paie.!trt_lx_nextcloud_si_paie_preprod.!trt_lx_nextcloud_si_paie_preprod2 > verbose: P: Stack path: > /default/app_softs_nextcloud/methods/'any'/default/installation_nextcloud/files/'/root/debian-11.2.0-amd64-DVD-1.iso'[1] > verbose: P: > verbose: P: Comment: Copie archive ISO ################## > verbose: File '/root/debian-11.2.0-amd64-DVD-1.iso' copy_from > '/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' > verbose: FindIdle: found connection to '192.168.10.225' already open and > ready. > verbose: '/root/debian-11.2.0-amd64-DVD-1.iso' wasn't at destination, > copying from '192.168.10.225: > /opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' > verbose: Copying remote file '192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso', > expecting 3897638912 bytes > verbose: SSL read failed: receive timeout > verbose: SSL read failed: receive timeout > verbose: SSL read failed: receive timeout > verbose: SSL read failed: receive timeout > verbose: SSL read failed: receive timeout > error: Connection unexpectedly closed (SSL_read): socket closed > error: Error in client-server stream, has 192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso > shrunk? (code 0) > verbose: Additional promise info: version 'CFEngine Promises.cf 3.18.0' > source path '/var/cfengine/inputs/app_softs_nextcloud.cf' at line 442 > comment 'Copie archive ISO ##################' > error: Failed to copy file > '/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' from '192.168.10.225' > verbose: Additional promise info: version 'CFEngine Promises.cf 3.18.0' > source path '/var/cfengine/inputs/app_softs_nextcloud.cf' at line 442 > comment 'Copie archive ISO ##################' > error: Copy from '192.168.10.225:/opt/essais_partage/debian-11.2.0-amd64-DVD-1.iso' > failed > error: Errors encountered when actuating files promise > '/root/debian-11.2.0-amd64-DVD-1.iso' > verbose: A: Promise NOT KEPT! > ..... > > to debug i run cf-served -d > debug: 192.168.10.45> Now reading from disk... > debug: 192.168.10.45> Now reading from disk... > debug: 192.168.10.45> Now reading from disk... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > debug: select(): 0 > debug: Waiting at incoming select... > .... > > i there any restrictions from secure via SSL. > How can I do to correct this problem? Thanks again for taking the time to > help me > > thanks lot !!!! > > > > -- > You received this message because you are subscribed to the Google Groups > "help-cfengine" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/help-cfengine/41fb5453-c6eb-400e-8e7d-b5f57f8d0cacn%40googlegroups.com > <https://groups.google.com/d/msgid/help-cfengine/41fb5453-c6eb-400e-8e7d-b5f57f8d0cacn%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- Craig Comstock | CFEngineer | https://cfengine.com Northern.tech AS <https://northern.tech> | @northerntechHQ <https://twitter.com/northerntechhq> -- You received this message because you are subscribed to the Google Groups "help-cfengine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/CAMDw%3DqGZX6auNAu%3DB%3D8%3D-csj0mtiMLk9BUV4UV5VwC0pG-mwdw%40mail.gmail.com.