topic Re: Dynatrace ActiveGate Installation Error in Dynatrace Managed Q&A

Dynatrace ActiveGate Installation Error

StateofMOBR — Wed, 17 Jan 2024 09:26:30 GMT

I am getting the following error when trying to run step 2 of the Linux ActiveGate installer:

Error reading S/MIME message
140170078168960:error:0D0D40D2:asn1 encoding routines:SMIME_read_ASN1:no multipart body failure:crypto/asn1/asn_mime.c:416:

Does anyone know what may be the cause of this?

Re: Dynatrace ActiveGate Installation Error

Pawel_Zalewski — Wed, 17 Jan 2024 08:42:35 GMT

Hi,

Can you post commands that you used? My first thought was that you have issue like in this thread:

https://community.dynatrace.com/t5/Dynatrace-Managed-Q-A/Dynatrace-Managed-installation-Error-reading-S-MIME-message/m-p/203348

Best Regards

Re: Dynatrace ActiveGate Installation Error

StateofMOBR — Wed, 17 Jan 2024 13:43:08 GMT

The first command was:
wget -O Dynatrace-ActiveGate-Linux-x86-1.249.243.sh "https://motrace.state.mo.us/e/058e3455-486c-40a8-beab-32f6d5d0ee7f/api/v1/deployment/installer/gateway/unix/latest?arch=x86&flavor=default" --header="Authorization: Api-Token dt0c01.Y7JCFOS5V6STB2KR3JBB52RB.JXSAIVAG4EG34AW6Z43DW62XU3FM4AE2VOT2WYJJAH4BR4YV2PQ66WVJVIGUJU3A"

And then the second command I ran was:
wget -O Dynatrace-ActiveGate-Linux-x86-1.249.243.sh "https://motrace.state.mo.us/e/058e3455-486c-40a8-beab-32f6d5d0ee7f/api/v1/deployment/installer/gateway/unix/latest?arch=x86&flavor=default" --header="Authorization: Api-Token dt0c01.Y7JCFOS5V6STB2KR3JBB52RB.JXSAIVAG4EG34AW6Z43DW62XU3FM4AE2VOT2WYJJAH4BR4YV2PQ66WVJVIGUJU3A"

The second command is when I got the error. I did also see the thread you listed, but I wasn't entirely sure if it was the same issue.

Thanks!!

Re: Dynatrace ActiveGate Installation Error

Pawel_Zalewski — Wed, 17 Jan 2024 13:49:48 GMT

Those commands you posted are identical. After download installer second one should be verify signature and then run the installer with root rights.

Re: Dynatrace ActiveGate Installation Error

StateofMOBR — Wed, 17 Jan 2024 13:52:03 GMT

That is correct, when verifying the signature I am getting the error of Error reading S/MIME message
140170078168960:error:0D0D40D2:asn1 encoding routines:SMIME_read_ASN1:no multipart body failure:crypto/asn1/asn_mime.c:416:

Re: Dynatrace ActiveGate Installation Error

Pawel_Zalewski — Wed, 17 Jan 2024 14:41:46 GMT

Please try to delete these last section of command.

| openssl cms -verify -CAfile dt-root.cert.pem > /dev/null

I read that it's problem with Certification Checking. You need to skip it somehow. I'll try scan AG installer script for any commands that verify it.

Re: Dynatrace ActiveGate Installation Error

nelcaps — Sun, 18 Aug 2024 19:36:02 GMT

I have the SAME issue. The first command could not even download the installer even if our Network/Firewall Team claims it is open.

Resolving ....
Connecting to ...:443... connected.
GnuTLS: Error in the pull function.
Unable to establish SSL connection.

How was issue fixed?

Even If I download the installer separately... and have all the IPs andURLs to our tenant vetted through the firewall -- we still could not install.

Re: Dynatrace ActiveGate Installation Error

dnpmoris — Wed, 21 Aug 2024 17:37:40 GMT

Even I am getting the same issue after executing the installer and in the verification step, getting below error

GnuTLS: Error in the pull function.
Unable to establish SSL connection.
Error loading file dt-root.cert.pem
139857517602624:error:02001002:system library:fopen:No such file or directory:crypto/bio/bss_file.c:69:fopen('dt-root.cert.pem','r')
139857517602624:error:2006D080:BIO routines:BIO_new_file:no such file:crypto/bio/bss_file.c:76:
139857517602624:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:crypto/x509/by_file.c:199:

Re: Dynatrace ActiveGate Installation Error

GilesDay — Tue, 27 Aug 2024 19:19:35 GMT

Not sure you really want these tokens public.

Re: Dynatrace ActiveGate Installation Error

Peter_Youssef — Fri, 20 Sep 2024 09:36:59 GMT

Hi @StateofMOBR

refer to https://docs.dynatrace.com/managed/shortlink/activegate-configuration-ssl
try to bypass the certificate check --no-cert-check