Version
All Cb Response Sensor
Issue
Sensors are not connecting to the server. They are getting an error:
failed to register [hr=0x80190190] [Code=400] |
Symptoms
/var/log/cb/nginx/error.log:
2016/03/17 11:09:30 [crit] 9429#0: *2836311 SSL_do_handshake() failed (SSL: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib) while SSL handshaking, client: ::ffff:10.132.86.203, server: [::]:443 2016/03/17 11:09:30 [alert] 9431#0: *2836303 ignoring stale global SSL error (SSL: error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01 error:04067072:rsa routines:RSA_EAY_PUBLIC_DECRYPT:padding check failed error:0D0C5006:asn1 encoding routines:ASN1_item_verify:EVP lib) while waiting for request, client: ::ffff:10.121.219.30, server: [::]:443 |
Cause
The sensor is unable to communicate with the server because its certificate has been revoked on the server side. This sensor is trying to use the revoked certificate. Cbdiag will show the cert for the Default Group is revoked.
Solution
Any sensors that are in this state will need to be reinstalled, in order to establish communication with the server.
