Return
-
Title
Agents not completing inventory - error occurred: "sslv3 alert handshake failure" or "Error Code (35:SSL connect error)" -
Description
Agents are not checking into the K1000 with SSL enabled. Error when forcing a target client machine to check into the K1000. The following similar error is observed for when SSLv3 is disabled from the K1000 version 6.4.x and the K1000 agent older than 6.4.180 is forced to complete inventory.
Error log displays:
[2016-02-10.09:45:45][runkbot:GetKbot ] Kbot [4-0] not found locally, downloading ...[2016-02-10.09:45:45][runkbot:DownloadUsingCurl ] DownloadFile: 'C:\ProgramData\Dell\KACE\kbots_cache\4-0.xml' error occurred: 'error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure' Error Code (35:SSL connect error), url: https://kace.k1000.local/service/kbot_service_notsoap.php?METHOD=getkbot&KUID=72EA3335-ABC9-25B0-BC44-697F33E1C2AD&KBOT_ID=4&KBOT_VERSION=0&CLIENT_VERSION=6.3.314[2016-02-10.09:45:45][runkbot:KCopyFile ] Error (cURL) copying files from 'https://kace.k1000.local/service/kbot_service_notsoap.php?METHOD=getkbot&KUID=81EA2235-FBF6-45A0-BB84-697F33E1C2AD&KBOT_ID=4&KBOT_VERSION=0&CLIENT_VERSION=6.3.314' to 'C:\ProgramData\Dell\KACE\kbots_cache\4-0.xml': (35) SSL connect error[2016-02-10.09:45:45][runkbot:GetKbotEvents ] GetKbotEvents: Document not parsed successfully[2016-02-10.09:45:45][runkbot:DownloadUsingCurl ] DownloadFile: 'C:\Users\tester\AppData\Local\Temp\dkl2BF0.tmp' error occurred: 'error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure' Error Code (35:SSL connect error), url: https://kace.k1000.local/service/kbot_service_notsoap.php?METHOD=getuploadpath&KUID=81EA2235-FBF6-45A0-BB84-697F33E1C2AD&FILENAME=KBOT_LOG.txt[2016-02-10.09:45:45][runkbot:KCopyFile ] Error (cURL) copying files from 'https://kace.k1000.local/service/kbot_service_notsoap.php?METHOD=getuploadpath&KUID=81EA2235-FBF6-45A0-BB84-697F33E1C2AD&FILENAME=KBOT_LOG.txt' to 'C:\Users\tester\AppData\Local\Temp\dkl2BF0.tmp': (35) SSL connect error[2016-02-10.09:45:45][runkbot:UploadLog ] Uploading Log: server [https://kace.k1000.local] failed to return valid upload path for kuid=[81EA2235-FBF6-45A0-BB84-697F33E1C2AD]: path=[][2016-02-10.09:45:45][runkbot:UploadLog ] (returning without attempting to upload log file)[2016-02-10.09:45:45][runkbot:CleanupLog ] Cleaning up log file [C:\Users\tester\AppData\Local\Temp\dkl2AB7.tmp] -
Cause
SSLv3 is necessary for agent communication with all K1000 agents that are older than version 6.4.180. Only K1000 agent version 6.4.180 uses TLS (Transport Layer Security) SSL for communication. All K1000 agents older than 6.4.180 will have to use SSLv3. -
Resolution
Please re-enable SSLv3 (Settings-> Control Panel-> Security Settings) in order for all K1000 agents older than version 6.4.180 to communicate with the K1000 version 6.4.x appliance. Consider upgrading all agents to 6.4.180, so that the SSLv3 communication can be disabled as desired.
To enable SSLv3:
- Go to Settings | Security Settings
- Locate the SSL section
- Check the box next to Enable SSLv3
- Click Save and Restart Services
