WebUI encryption

[victor]

Important part is this:

configure:17311: checking for RSA_new in -lcrypto
configure:17336: gcc -o conftest -g -O2  -D_THREAD_SAFE -DTRE_WCHAR=1 -I/usr/local/mysql/include -I/usr/include/mysql -I/usr/mysql/include -I/usr/local/include/mysql -I/usr/local/mysql/include/mysql -I/usr/mysql/include/mysql -D_GNU_SOURCE -I/usr/local/include  -L/usr/local/mysql/lib -L/usr/lib64/mysql -L/usr/lib/mysql -L/usr/mysql/lib -L/usr/local/lib/mysql -L/usr/local/mysql/lib/mysql -L/usr/mysql/lib/mysql -L/usr/local/lib conftest.c -lcrypto   -lpthread >&5
/usr/bin/ld: cannot find -lcrypto

which means that configure cannot find libcrypto, and so server was built without encryption support. You have to install libssl-dev package and re-run configure and make.

Best regards,
Victor

[Nikk]

Thank you a lot, it worked

[ecascioli]

Hi, I have the same problem !
I always receive "Encryption is not supported by peer"
I post my config.log file hoping to be helped
Thank you !

---

config.log.gz

[victor]

Hi!

Quite strange, according to config.log you've build server with encryption support. Can you please show me output of

ldd /usr/bin/netxmsd

Also, try to connect with desktop console with "Encrypt session" option turned on.

Best regards,
Victor

[ecascioli]

This is the ouput of ldd /usr/local/bin/netxmsd (with local directory)

root@netxms:~# ldd /usr/local/bin/netxmsd
        linux-vdso.so.1 =>  (0x00007fffc1b27000)
        libnxcore.so.1 => /usr/local/lib/libnxcore.so.1 (0x00007f1a377ea000)
        libnxsrv.so.1 => /usr/local/lib/libnxsrv.so.1 (0x00007f1a375d5000)
        libnxsnmp.so.1 => /usr/local/lib/libnxsnmp.so.1 (0x00007f1a373c5000)
        libnxsl.so.1 => /usr/local/lib/libnxsl.so.1 (0x00007f1a37184000)
        libnxmap.so.1 => /usr/local/lib/libnxmap.so.1 (0x00007f1a36f7f000)
        libnxlp.so.1 => /usr/local/lib/libnxlp.so.1 (0x00007f1a36d77000)
        libnxdb.so.1 => /usr/local/lib/libnxdb.so.1 (0x00007f1a36b6d000)
        libnetxms.so.1 => /usr/local/lib/libnetxms.so.1 (0x00007f1a3693d000)
        libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f1a36725000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f1a36521000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f1a36305000)
        libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f1a35ffd000)
        libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f1a35d7b000)
        libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f1a35b65000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1a357da000)
        libnxtre.so.5 => /usr/local/lib/libnxtre.so.5 (0x00007f1a355cb000)
        libnxexpat.so.1 => /usr/local/lib/libnxexpat.so.1 (0x00007f1a353a7000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f1a37b17000)

This is my Debian version:
root@netxms:~# uname -a
Linux netxms 3.2.0-4-amd64 #1 SMP Debian 3.2.46-1 x86_64 GNU/Linux

I tried desktop management console: with "Encrypt connection" turned on I receive the error "Encryption is not supported by peer".
With "Encrypt connection" turned off...I get in :)))

Should I compile with --disable-encryption ?

Thank you

[ecascioli]

I tried to compile again with --disable-encryption but nothing has changed.

[victor]

From ldd output it seems that encryption was disabled. Please run configure again and send me summary printed by configure script when it finishes.

Best regards,
Victor

[ecascioli]

Here it is:

Command was:
sh ./configure --with-server --with-mysql --with-agent

And this is summary:

---------------------------------------------------------------------
                        Configure results
---------------------------------------------------------------------

Prefix                  : /usr/local
Build Server            : YES
Server libs            :  -lssl
Encryption enabled      : YES
Build DB-Drivers        : mysql
Build Clients          : NO
Build Agent            : YES
Subagents list          : linux
Build Static Agent      : NO
UNICODE build          : NO
Use internal libexpat  : YES
Use internal libtre    : YES
Use internal zlib      : NO
Force 32bit build      : NO
C compiler              : gcc
C++ compiler            : g++
CPPFLAGS                :  -D_THREAD_SAFE -DTRE_WCHAR=1 -I/usr/local/mysql/include -I/usr/include/mysql -I/usr/mysql/include -I/usr/local/include/mysql -I/usr/local/mysql/include/mysql -I/usr/mysql/include/mysql -D_GNU_SOURCE -I/usr/local/include -DPREFIX=\"${prefix}\" -DDATADIR=\"${pkgdatadir}\" -DBINDIR=\"${bindir}\" -DLIBDIR=\"${libdir}\" -DPKGLIBDIR=\"${pkglibdir}\"
CXXFLAGS                : -g -O2 -fno-rtti -fno-exceptions
CFLAGS                  : -g -O2
LDFLAGS                :  -L/usr/local/mysql/lib -L/usr/lib64/mysql -L/usr/lib/mysql -L/usr/mysql/lib -L/usr/local/lib/mysql -L/usr/local/mysql/lib/mysql -L/usr/mysql/lib/mysql -L/usr/local/lib
LIBS                    : -lz -ldl -lcrypto -lcrypto -lcrypto  -lpthread
MySQL libs              : -lmysqlclient

[victor]

Strange. Should work. Try to do

make clean
make
make install

just in case and try again. After that, try to start server with debug level 6 and check log for possible errors related to encryption.

Best regards,
Victor

[ecascioli]

Great !
It's now active and I can use it by client and by web.
Solved just  by "make clean"....sometimes a very few is enough...

Thank you again, Viktor !