Loading of web.ixsystems.com/updates/ix_crl.pem reported to fail in /var/messages

[-fun-]

Hi,

I'm bothered about log entries in /var/messages telling me my FreeNAS box tried but wasn't able to retrieve some certificate from an ixsystems webserver. See below for details. I searched the forum about this and apparently I'm not the only one reporting this to fail. I however did not find any reason why this might fail in may case. The certificate file can be loaded from the server just fine.

The failures appear in the log quite frequently -- much more frequent than I would suspect a temporary network problem on my side. OTOH I can't make out any real pattern here.

Can I safely ignore the messages?

Is this just a frequently appearing problem of the ixsystems webserver?

-flo-



Messages in rotated log files:

Code:

[root@unger] /var/log# bzcat messages.* | grep "https://web.ixsystems.com/updates/ix_crl.pem"
Mar 14 04:01:04 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Mar 14 04:01:04 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Mar 21 03:21:10 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 65] No route to host>
Mar 21 03:21:10 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 65] No route to host>
Mar 22 06:24:29 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Mar 22 06:24:29 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Mar 24 20:31:27 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: Host web.ixsystems.com returned an invalid certificate (_ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed)
Mar 24 20:31:27 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: Host web.ixsystems.com returned an invalid certificate (_ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed)
Feb 13 23:32:56 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Feb 13 23:32:56 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Feb 21 18:56:06 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 60] Operation timed out>
Feb 21 18:56:06 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 60] Operation timed out>
Feb 25 08:07:21 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Feb 25 08:07:21 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Jan  9 02:22:02 unger update_check.py: [freenasOS.Manifest:386] Could not get CRL file https://web.ixsystems.com/updates/ix_crl.pem

Messages from current log file:

Code:

[root@unger] /var/log# cat messages | grep "https://web.ixsystems.com/updates/ix_crl.pem"
Apr  6 11:10:47 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Apr  6 11:10:47 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Apr  8 06:16:09 unger alert.py: [freenasOS.Configuration:615] Unable to load https://web.ixsystems.com/updates/ix_crl.pem: <urlopen error [Errno 8] hostname nor servname provided, or not known>
Apr  8 06:16:09 unger alert.py: [freenasOS.Configuration:629] Unable to load ['https://web.ixsystems.com/updates/ix_crl.pem']: <urlopen error [Errno 8] hostname nor servname provided, or not known>

File can be loaded:

Code:

[root@unger] /var/log# curl https://web.ixsystems.com/updates/ix_crl.pem
-----BEGIN X509 CRL-----
MIICzjCBtzANBgkqhkiG9w0BAQsFADByMQswCQYDVQQGEwJVUzELMAkGA1UECAwC
[...]
Woo1cknSkiNswnQwbWJlgiGikWMDBONYmva1AG8qqVGGP54li2iO7vQm6i1KMjFJ
z8c=
-----END X509 CRL-----
[root@unger] /var/log#

 

[depasseg]

Are you able to ping web.ixsystems.com from the console? I'm guessing DNS isn't configured.

 

[dlavigne]

And if DNS isn't the issue, what's your build version (from System -> Information)? This is supposed to be fixed in https://bugs.freenas.org/issues/13849.

 

[-fun-]

I didn't try ping but

curl https://web.ixsystems.com/updates/ix_crl.pem

works fine, see above. So no DNS issue.

I can't seem to be able to access the issue tracker :-( but it's good to know this has been known as a bug. I have a quite old version (FreeNAS-9.3-STABLE-201601181840). Is issue 13849 something critical / worth updating?

-flo-

 

[dlavigne]

That bug showed this fix 28 days ago: https://bugs.freenas.org/projects/f...ions/b24ddf9a3a814d8729ebc56839e940f9dfd4f2de.

 

[-fun-]

Ah fine, thanks! My build is older so that's clear now. I guess I should have checked the issue tracker before posting. :-/

-flo-