landscape-client for aarch64 can't register to X86 landscape-server

[Étienne Rodrigue]

When I try to register a RPI3 running Ununtu 18.04 to landscape server, I get this error :
"Request a new registration for this computer now? [Y/n]:
Traceback (most recent call last):
Failure: twisted.internet.error.ConnectionDone: Connection was closed cleanly."

I don't see any errors in landscape logs neither on client side or server side.

It feels like it's a cerrtificate issue but everything seems to be fine. Its works with same config on x86 clients and when I test the connection it's works :

root@pi:~# curl https://mgmt.stdo.nixsysadmin.com/message-system
Landscape message server

root@pi:/var/log/landscape# openssl s_client -connect mgmt.stdo.nixsysadmin.com:443
CONNECTED(00000005)
depth=0 CN = mgmt.stdo.nixsysadmin.com
verify error:num=18:self signed certificate
verify return:1
depth=0 CN = mgmt.stdo.nixsysadmin.com
verify return:1
---
Certificate chain
 0 s:CN = mgmt.stdo.nixsysadmin.com
   i:CN = mgmt.stdo.nixsysadmin.com
 1 s:CN = mgmt.stdo.nixsysadmin.com
   i:CN = mgmt.stdo.nixsysadmin.com
---
Server certificate
-----BEGIN CERTIFICATE-----
REDACTED
-----END CERTIFICATE-----
subject=CN = mgmt.stdo.nixsysadmin.com

issuer=CN = mgmt.stdo.nixsysadmin.com

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 1592 bytes and written 420 bytes
Verification error: self signed certificate
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol : TLSv1.2
    Cipher : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: 319FF9EA8328F016A3D35ADA11C1C3930E02F861F5D8CF584FC2CF95AB18B3F8
    Session-ID-ctx:
    Master-Key: E8E3535D7DC462CA286D7B1015CA413A08C7D1A0F66CCABE988C0A771B95A7828EC21CE31F0DE66AC9092D4C7A5159F5
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 70 c0 cb 47 4a e2 1c 6b-57 9a af 26 44 66 44 31 p..GJ..kW..&DfD1
    0010 - aa a6 81 0f d0 75 41 25-ba af e2 a3 f5 16 4a 3c .....uA%......J<
    0020 - a4 a1 05 ca e2 53 90 68-98 6d 5a 12 15 76 ee de .....S.h.mZ..v..
    0030 - 18 79 a8 52 4b 28 93 3e-71 a4 03 8f 53 85 ee a2 .y.RK(.>q...S...
    0040 - 08 d7 6b f6 78 1c 8f 3f-f8 ea 1f fc 12 a2 73 b1 ..k.x..?......s.
    0050 - 17 e2 e0 e1 b4 13 9f fd-56 f5 5c f5 13 1c ef f9 ........V.\.....
    0060 - fc d2 c0 bc f0 d1 b6 73-bd 5d f5 24 2d 40 32 c5 .......s.].$-@2.
    0070 - 5d 5b f2 58 f9 6e 6f 9e-10 60 af 21 be 61 d1 ae ][.X.no..`.!.a..
    0080 - 62 0f 57 43 03 86 fd 6d-c8 9a 70 80 f9 30 72 b8 b.WC...m..p..0r.
    0090 - 99 c9 fa 83 e7 d8 c5 f3-8d 22 65 19 59 df 75 cc ........."e.Y.u.
    00a0 - ce 07 78 64 44 84 e7 cd-3a d0 9c 1a 3f 29 39 71 ..xdD...:...?)9q
    00b0 - 89 5a ea c0 26 11 d7 6d-cb 2f e0 ed ca 17 97 93 .Z..&..m./......
    00c0 - 05 51 6e 26 ce d5 72 22-ef 1d 8b 8b 97 1c c3 67 .Qn&..r".......g
    00d0 - 23 c3 40 20 e5 9b fa ce-94 70 d4 13 ac e6 be c8 #.@ .....p......

    Start Time: 1583069070
    Timeout : 7200 (sec)
    Verify return code: 18 (self signed certificate)
    Extended master secret: yes
---
closed

[Étienne Rodrigue (etiennerodrigue)]

Software infos :

root@pi:~# lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.4 LTS
Release: 18.04
Codename: bionic

root@pi:~# uname -a
Linux pi 5.3.0-1018-raspi2 #20~18.04.1-Ubuntu SMP Wed Feb 5 04:56:34 UTC 2020 aarch64 aarch64 aarch64 GNU/Linux

root@pi:~# landscape-client --version
18.01-0ubuntu3.4

[Simon Poirier (simpoir)]

This appear like a support request and not a bug, so I'm closing this issue. If you think this is incorrect, kindly reopen the issue with additional info to reproduce it.

It looks like a client misconfiguration, since you're using self-signed certificates and openssl is telling you there is an error. You may want to make sure to install your certificate locally and update-ca-certifates, or use the --ssl-public-key option in landscape.