WebUI encryption

Victor Kirhenshtein

Just to be sure - did you install server from sources or from deb package?

Best regards,
Victor

Nikk

I did everything what was told in Installation guide, so installed from source, but I might have installed deb package afterwards (because I thought it was some kind of additional libraries to source code)

Thanks in advance,
Nikk

Victor Kirhenshtein

You should install either from source code or from deb packages. You can check what you are using by path - deb packages installs all binaries under /usr/bin, while building from source by default will use /usr/local/bin. If you have both binaries and linraries, I recommend to remove either deb packages or binaries built from source code.

Best regards,
Victor

Nikk

Ok, I just did a clean install from source, but i'm getting the same error!

And here is my config.log
https://www.dropbox.com/s/joqzra21l5sa30v/config.log

Thanks in advance,
Nikk

Victor Kirhenshtein

Please post your config.log (it should be in the root of source directory).

Nikk

Posted it in previous reply

Victor Kirhenshtein

Important part is this:

configure:17311: checking for RSA_new in -lcrypto
configure:17336: gcc -o conftest -g -O2  -D_THREAD_SAFE -DTRE_WCHAR=1 -I/usr/local/mysql/include -I/usr/include/mysql -I/usr/mysql/include -I/usr/local/include/mysql -I/usr/local/mysql/include/mysql -I/usr/mysql/include/mysql -D_GNU_SOURCE -I/usr/local/include  -L/usr/local/mysql/lib -L/usr/lib64/mysql -L/usr/lib/mysql -L/usr/mysql/lib -L/usr/local/lib/mysql -L/usr/local/mysql/lib/mysql -L/usr/mysql/lib/mysql -L/usr/local/lib conftest.c -lcrypto   -lpthread >&5
/usr/bin/ld: cannot find -lcrypto

which means that configure cannot find libcrypto, and so server was built without encryption support. You have to install libssl-dev package and re-run configure and make.

Best regards,
Victor

Nikk

Thank you a lot, it worked

ecascioli

Hi, I have the same problem !
I always receive "Encryption is not supported by peer"
I post my config.log file hoping to be helped
Thank you !

config.log.gz

Victor Kirhenshtein

Hi!

Quite strange, according to config.log you've build server with encryption support. Can you please show me output of

ldd /usr/bin/netxmsd

Also, try to connect with desktop console with "Encrypt session" option turned on.

Best regards,
Victor

ecascioli

This is the ouput of ldd /usr/local/bin/netxmsd (with local directory)

root@netxms:~# ldd /usr/local/bin/netxmsd
linux-vdso.so.1 => (0x00007fffc1b27000)
libnxcore.so.1 => /usr/local/lib/libnxcore.so.1 (0x00007f1a377ea000)
libnxsrv.so.1 => /usr/local/lib/libnxsrv.so.1 (0x00007f1a375d5000)
libnxsnmp.so.1 => /usr/local/lib/libnxsnmp.so.1 (0x00007f1a373c5000)
libnxsl.so.1 => /usr/local/lib/libnxsl.so.1 (0x00007f1a37184000)
libnxmap.so.1 => /usr/local/lib/libnxmap.so.1 (0x00007f1a36f7f000)
libnxlp.so.1 => /usr/local/lib/libnxlp.so.1 (0x00007f1a36d77000)
libnxdb.so.1 => /usr/local/lib/libnxdb.so.1 (0x00007f1a36b6d000)
libnetxms.so.1 => /usr/local/lib/libnetxms.so.1 (0x00007f1a3693d000)
libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f1a36725000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f1a36521000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f1a36305000)
libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f1a35ffd000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f1a35d7b000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f1a35b65000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f1a357da000)
libnxtre.so.5 => /usr/local/lib/libnxtre.so.5 (0x00007f1a355cb000)
libnxexpat.so.1 => /usr/local/lib/libnxexpat.so.1 (0x00007f1a353a7000)
/lib64/ld-linux-x86-64.so.2 (0x00007f1a37b17000)

This is my Debian version:
root@netxms:~# uname -a
Linux netxms 3.2.0-4-amd64 #1 SMP Debian 3.2.46-1 x86_64 GNU/Linux

I tried desktop management console: with "Encrypt connection" turned on I receive the error "Encryption is not supported by peer".
With "Encrypt connection" turned off...I get in :)))

Should I compile with --disable-encryption ?

Thank you

ecascioli

I tried to compile again with --disable-encryption but nothing has changed.

Victor Kirhenshtein

From ldd output it seems that encryption was disabled. Please run configure again and send me summary printed by configure script when it finishes.

Best regards,
Victor

ecascioli

Here it is:

Command was:
sh ./configure --with-server --with-mysql --with-agent

And this is summary:

---------------------------------------------------------------------
Configure results
---------------------------------------------------------------------

Prefix : /usr/local
Build Server : YES
Server libs : -lssl
Encryption enabled : YES
Build DB-Drivers : mysql
Build Clients : NO
Build Agent : YES
Subagents list : linux
Build Static Agent : NO
UNICODE build : NO
Use internal libexpat : YES
Use internal libtre : YES
Use internal zlib : NO
Force 32bit build : NO
C compiler : gcc
C++ compiler : g++
CPPFLAGS : -D_THREAD_SAFE -DTRE_WCHAR=1 -I/usr/local/mysql/include -I/usr/include/mysql -I/usr/mysql/include -I/usr/local/include/mysql -I/usr/local/mysql/include/mysql -I/usr/mysql/include/mysql -D_GNU_SOURCE -I/usr/local/include -DPREFIX=\"${prefix}\" -DDATADIR=\"${pkgdatadir}\" -DBINDIR=\"${bindir}\" -DLIBDIR=\"${libdir}\" -DPKGLIBDIR=\"${pkglibdir}\"
CXXFLAGS : -g -O2 -fno-rtti -fno-exceptions
CFLAGS : -g -O2
LDFLAGS : -L/usr/local/mysql/lib -L/usr/lib64/mysql -L/usr/lib/mysql -L/usr/mysql/lib -L/usr/local/lib/mysql -L/usr/local/mysql/lib/mysql -L/usr/mysql/lib/mysql -L/usr/local/lib
LIBS : -lz -ldl -lcrypto -lcrypto -lcrypto -lpthread
MySQL libs : -lmysqlclient

Victor Kirhenshtein

Strange. Should work. Try to do

make clean
make
make install

just in case and try again. After that, try to start server with debug level 6 and check log for possible errors related to encryption.

Best regards,
Victor

ecascioli

Great !
It's now active and I can use it by client and by web.
Solved just by "make clean"....sometimes a very few is enough...

Thank you again, Viktor !

NetXMS Forum

WebUI encryption