[Fusioninventory-devel] Fusioninventory agent 2.3.4 - 2.3.6 cannot download deploy files when GLPI+FI lies on IIS 8.0 server

[Ozy de Jong]

Hello Guillaume,

The problem does not really lie in the SSL verification (as my fi clients already have no-ssl-check enabled), but in the fact that the libwww-perl changed their way of coding binary file transfers, see the link in my first email for more info, this is a known bug in the perl community, that only seems to happen on IIS.

Ozy.
 
-----Message initial-----
> De:Guillaume Rousse <guillomovitch at gmail.com>
> Envoyé: jeudi 20 mars 2014 14:05
> À: fusioninventory-devel at lists.alioth.debian.org
> Sujet: Re: [Fusioninventory-devel] Fusioninventory agent 2.3.4 - 2.3.6 cannot download deploy files when GLPI+FI lies on IIS 8.0 server
> 
> Le 20/03/2014 13:39, Ozy de Jong a écrit :
> > Hello,
> >
> > Well this is actually my topic (i'm deajan on the forum).
> > So this mail for the ML-Dev is just an english translation of my journey with the agent on the forum :)
> >
> > Anyway, downgrading libwww-perl to 5.834 works as a quick fix.
> Probably because previous major version of libwww didn't enforced SSL 
> certificate by default, and did it in a very limited manner when enabled.
> 
> > Using curl instead of libwww-perl would seem a very good solution to me (no SSL hell), but i'm not a perl developper.
> Probably because curl doesn't enforce the same SSL checks. And relying 
> on an external binary instead of a native perl library would probably 
> brings additional issues, such as packaging issue for instances.
> 
> Better suggestion if you want to avoid 'SSL hell':
> - don't use SSL at all, unless you understand how it works, what kind of 
> security it brings, and you know than you need it
> - use SSL, but don't validate server certificates (no-ssl-check in agent 
> configuration)
> -- 
> Guillaume
> 
> 
> _______________________________________________
> Fusioninventory-devel mailing list
> Fusioninventory-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/fusioninventory-devel