cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

OneAgent on AWS ECS (using e2) - agent download works/ integrity validation fails

michaelstephan
Newcomer

Hello,

 

I'm following the guide OneAgent on ECS2 installation guide (https://www.dynatrace.com/support/help/technology-support/cloud-platforms/amazon-web-services/integr...)  but face a problem.

 

Download works ok but the integrity verification process fails. See the logs below:

 

28.5.2021, 12:52:02 139677466031936:error:2E09A09E:CMS routines:CMS_SignerInfo_verify_content:verification failure:crypto/cms/cms_sd.c:848: arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:52:02 139677466031936:error:2E09D06D:CMS routines:CMS_verify:content verify error:crypto/cms/cms_smime.c:393: arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:52:02 10:52:02 Error: Verification failure arn:aws:ecs:eu-central-1:128993096658:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:52:02 10:52:02 Error: Failed to validate integrity of agent installer. Setup won't continue. arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:51:50 10:51:50 Verifying agent installer signature arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:51:50 10:51:50 Downloaded version: 1.215.192.20210519-150820 arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:51:47 10:51:47 Download complete arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent
28.5.2021, 12:51:40 10:51:40 Downloading agent to /tmp/Dynatrace-OneAgent-Linux.sh via https://XXX.live.dynatrace.com/api/v1/deployment/installer/agent/unix/default/latest?arch=x86&Api-To... arn:aws:ecs:eu-central-1:XXX:task/wp/f1937eae442e451fafdc962ab6fb3eba
oneagent

 

As this is only a prototype setup it is ok to disable the verification process. Setting the env prop ONEAGENT_INSTALLER_SKIP_CERT_CHECK to true make no difference, it seems to be ignored.

 

Thanks for any advice.

 

Regards,

Michael

 

 

1 REPLY 1

ChadTurner
Leader

I would recommend a support ticket on this

-Chad