Ad Widget

Collapse

Error creating Zabbix Proxy - Ubuntu Server 20.04 - Zabbix 5.4

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • brhunt
    Member
    • Feb 2013
    • 50
    #1

    Error creating Zabbix Proxy - Ubuntu Server 20.04 - Zabbix 5.4

    Hello.

    I am getting errors when trying to create a Zabbix proxy from packages.

    The first error is a certificate error in the apt update step:
    Err:3 https://repo.zabbix.com/zabbix/5.4/ubuntu focal Release
    Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 178.128.6.101 443]
    The second error is also in the apt update step:
    E: The repository 'https://repo.zabbix.com/zabbix/5.4/ubuntu focal Release' does not have a Release file.
    The last error is in the apt -y install zabbix-proxy-mysql zabbix-sql-scripts step:
    E: Unable to locate package zabbix-sql-scripts
    The full output is below. Can anyone assist in getting past these errors?

    Thanks.

    Bryan Hunt

    Code:
    root@abcde-zp-03:/home/abcdeadmin# wget https://repo.zabbix.com/zabbix/5.4/ubuntu/pool/main/z/zabbix-release/zabbix-release_5.4-1+ubuntu$(lsb_release -rs)_all.deb
--2021-10-25 11:39:12-- https://repo.zabbix.com/zabbix/5.4/ubuntu/pool/main/z/zabbix-release/zabbix-release_5.4-1+ubuntu20.04_all.deb
Resolving repo.zabbix.com (repo.zabbix.com)... 178.128.6.101, 2604:a880:2:d0::2062:d001
Connecting to repo.zabbix.com (repo.zabbix.com)|178.128.6.101|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 3468 (3.4K) [application/octet-stream]
Saving to: ‘zabbix-release_5.4-1+ubuntu20.04_all.deb’

zabbix-release_5.4- 100%[===================>] 3.39K --.-KB/s in 0s

2021-10-25 11:39:12 (64.0 MB/s) - ‘zabbix-release_5.4-1+ubuntu20.04_all.deb’ saved [3468/3468]

root@abcde-zp-03:/home/abcdeadmin# ls
zabbix-release_5.4-1+ubuntu20.04_all.deb

root@abcde-zp-03:/home/abcdeadmin# dpkg -i zabbix-release_5.4-1+ubuntu$(lsb_release -rs)_all.deb
Selecting previously unselected package zabbix-release.
(Reading database ... 71468 files and directories currently installed.)
Preparing to unpack zabbix-release_5.4-1+ubuntu20.04_all.deb ...
Unpacking zabbix-release (1:5.4-1+ubuntu20.04) ...
Setting up zabbix-release (1:5.4-1+ubuntu20.04) ...

root@abcde-zp-03:/home/abcdeadmin# ls
zabbix-release_5.4-1+ubuntu20.04_all.deb

root@abcde-zp-03:/home/abcdeadmin# apt update
Ign:1 https://repo.zabbix.com/zabbix/5.4/ubuntu focal InRelease
Hit:2 http://archive.ubuntu.com/ubuntu focal InRelease
Err:3 https://repo.zabbix.com/zabbix/5.4/ubuntu focal Release
Certificate verification failed: The certificate is NOT trusted. The certificate chain uses expired certificate. Could not handshake: Error in the certificate verification. [IP: 178.128.6.101 443]
Get:4 http://archive.ubuntu.com/ubuntu focal-updates InRelease [114 kB]
Get:5 http://archive.ubuntu.com/ubuntu focal-backports InRelease [101 kB]
Get:6 http://archive.ubuntu.com/ubuntu focal-security InRelease [114 kB]
Get:7 http://archive.ubuntu.com/ubuntu focal/restricted amd64 Packages [22.0 kB]
Get:8 http://archive.ubuntu.com/ubuntu focal/restricted Translation-en [6,212 B]
Get:9 http://archive.ubuntu.com/ubuntu focal/restricted amd64 c-n-f Metadata [392 B]
Get:10 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages [8,628 kB]
Get:11 http://archive.ubuntu.com/ubuntu focal/universe Translation-en [5,124 kB]
Get:12 http://archive.ubuntu.com/ubuntu focal/universe amd64 c-n-f Metadata [265 kB]
Get:13 http://archive.ubuntu.com/ubuntu focal/multiverse amd64 Packages [144 kB]
Get:14 http://archive.ubuntu.com/ubuntu focal/multiverse Translation-en [104 kB]
Get:15 http://archive.ubuntu.com/ubuntu focal/multiverse amd64 c-n-f Metadata [9,136 B]
Get:16 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 Packages [1,294 kB]
Get:17 http://archive.ubuntu.com/ubuntu focal-updates/main Translation-en [269 kB]
Get:18 http://archive.ubuntu.com/ubuntu focal-updates/main amd64 c-n-f Metadata [14.4 kB]
Get:19 http://archive.ubuntu.com/ubuntu focal-updates/restricted amd64 Packages [522 kB]
Get:20 http://archive.ubuntu.com/ubuntu focal-updates/restricted Translation-en [74.8 kB]
Get:21 http://archive.ubuntu.com/ubuntu focal-updates/restricted amd64 c-n-f Metadata [504 B]
Get:22 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages [866 kB]
Get:23 http://archive.ubuntu.com/ubuntu focal-updates/universe Translation-en [186 kB]
Get:24 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 c-n-f Metadata [19.3 kB]
Get:25 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 Packages [24.6 kB]
Get:26 http://archive.ubuntu.com/ubuntu focal-updates/multiverse Translation-en [6,856 B]
Get:27 http://archive.ubuntu.com/ubuntu focal-updates/multiverse amd64 c-n-f Metadata [620 B]
Get:28 http://archive.ubuntu.com/ubuntu focal-backports/main amd64 Packages [2,568 B]
Get:29 http://archive.ubuntu.com/ubuntu focal-backports/main Translation-en [1,120 B]
Get:30 http://archive.ubuntu.com/ubuntu focal-backports/main amd64 c-n-f Metadata [400 B]
Get:31 http://archive.ubuntu.com/ubuntu focal-backports/restricted amd64 c-n-f Metadata [116 B]
Get:32 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 Packages [5,800 B]
Get:33 http://archive.ubuntu.com/ubuntu focal-backports/universe Translation-en [2,068 B]
Get:34 http://archive.ubuntu.com/ubuntu focal-backports/universe amd64 c-n-f Metadata [276 B]
Get:35 http://archive.ubuntu.com/ubuntu focal-backports/multiverse amd64 c-n-f Metadata [116 B]
Get:36 http://archive.ubuntu.com/ubuntu focal-security/main amd64 Packages [945 kB]
Get:37 http://archive.ubuntu.com/ubuntu focal-security/main Translation-en [178 kB]
Get:38 http://archive.ubuntu.com/ubuntu focal-security/main amd64 c-n-f Metadata [8,840 B]
Get:39 http://archive.ubuntu.com/ubuntu focal-security/restricted amd64 Packages [482 kB]
Get:40 http://archive.ubuntu.com/ubuntu focal-security/restricted Translation-en [69.2 kB]
Get:41 http://archive.ubuntu.com/ubuntu focal-security/restricted amd64 c-n-f Metadata [508 B]
Get:42 http://archive.ubuntu.com/ubuntu focal-security/universe amd64 Packages [647 kB]
Get:43 http://archive.ubuntu.com/ubuntu focal-security/universe Translation-en [106 kB]
Get:44 http://archive.ubuntu.com/ubuntu focal-security/universe amd64 c-n-f Metadata [12.6 kB]
Get:45 http://archive.ubuntu.com/ubuntu focal-security/multiverse amd64 Packages [21.9 kB]
Get:46 http://archive.ubuntu.com/ubuntu focal-security/multiverse Translation-en [4,948 B]
Get:47 http://archive.ubuntu.com/ubuntu focal-security/multiverse amd64 c-n-f Metadata [540 B]
Reading package lists... Done
E: The repository 'https://repo.zabbix.com/zabbix/5.4/ubuntu focal Release' does not have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

root@abcde-zp-03:/home/abcdeadmin# apt -y install zabbix-proxy-mysql zabbix-sql-scripts
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package zabbix-sql-scripts

root@abcde-zp-03:/home/abcdeadmin#
    Tags: None
    • tim.mooney
      Senior Member
      • Dec 2012
      • 1427
      #2
      Hi brhunt

      I had the same error trying to access the repo. It's not because of any problem with the repo, it's because the older Let's Encrypt root CA expired and software linked against older versions of OpenSSL or GnuTLS don't realize that there's a separate trust chain that is still valid.

      DST Root CA X3 Expiration (September 2021)
      https://letsencrypt.org/docs/dst-root-ca-x3-expiration-september-2021/
      Update Feb 05, 2024 It’s been two years, and the Android compatibility cross-sign mentioned below is close to expiring. See our recent blog post for a detailed explanation of the changes coming over the course of 2024. Update September 30, 2021 As planned, the DST Root CA X3 cross-sign has expired, and we’re now using our own ISRG Root X1 for trust on almost all devices. For more details about the plan, keep reading! We have also updated our Production Chain Changes thread on our community forum - our team and community are here and ready to help with any questions you may have about this expiration.


      There may be an update for your system (possibly to ca-certificates) that will fix it for you, otherwise, you need to use an option to disable certificate verification when fetching the software.

        Comment

        • brhunt
          Member
          • Feb 2013
          • 50
          #3
          Tim,

          Good catch on that one! I would have never gotten there without that pointer.

          For those experiencing the same issue on Ubuntu Server 20.04, here are the steps I followed to correct the issue:

          nano /etc/ca-certificates.conf and comment out the DST certificate.

          go to the /etc/ssl/certs directory and rm the DST certificate.

          run update-ca-certificates -f -v

          That should fix it.

          Per: https://www.linuxadictos.com/en/ya-i...oot-ca-x3.html

          Thanks.

          Bryan Hunt

            Comment

            Previous template Next
            Working...