Skip to main content

cPanel update failure during updatenow

Comments

36 comments

  • swatkatsdevilz
    I also got some Email stating the Failed Update on 1 of my server
    Update log preview: ---------------------------------------------------------------------------------------------------- => Log opened from cPanel Update (upcp) - Slave (23652) at Tue Jun 23 09:35:56 2015 [2015-06-23 09:35:56 +0530] Detected cron=0 (manual flag passed on command line) [2015-06-23 09:35:56 +0530] 1% complete [2015-06-23 09:35:56 +0530] Running Standardized hooks [2015-06-23 09:35:56 +0530] 2% complete [2015-06-23 09:35:56 +0530] mtime on upcp is 1434516263 (Wed Jun 17 10:14:23 2015) ---------------------------------------------------------------------------------------------------- => Log opened from /usr/local/cpanel/scripts/updatenow (23654) at Tue Jun 23 09:35:57 2015 [2015-06-23 09:35:57 +0530] W Unable to download public key from vendor: cpanel, category: release, url: https://securedownloads.cpanel.net/cPanelPublicKey.asc [2015-06-23 09:35:57 +0530] W Failure when adding key: Failed to parse key id. [2015-06-23 09:35:58 +0530] W Unable to download public key from vendor: cpanel, category: development, url:https://securedownloads.cpanel.net/cPanelDevelopmentKey.asc [2015-06-23 09:35:58 +0530] W Failure when adding key: Failed to parse key id. [2015-06-23 09:35:58 +0530] W Unable to download public key from vendor: cpanel, category: development-sts, url:https://securedownloads.cpanel.net/STSTestKey.asc [2015-06-23 09:35:58 +0530] W Failure when adding key: Failed to parse key id. [2015-06-23 09:35:58 +0530] W Failed to download all specified public keys. [2015-06-23 09:35:58 +0530] Detected version '11.50.0.12' from version file. [2015-06-23 09:35:58 +0530] Running version '11.50.0.12' of updatenow. [2015-06-23 09:35:58 +0530] ***** FATAL: Unable to retrieve tier version info: Failed to create gpg object: Failed to add key '506DEE62F222E637' : Failed to import key. Please seehttp://go.cpanel.net/sigerrors for further information about this error. [2015-06-23 09:35:58 +0530] The Administrator will be notified to review this output when this script completes => Log closed Tue Jun 23 09:35:58 2015 [2015-06-23 09:35:58 +0530] 17% complete [2015-06-23 09:35:58 +0530] E Running `/usr/local/cpanel/scripts/updatenow --upcp --log=/var/cpanel/updatelogs/update.1435032356.log` failed, exited with code 255 (signal = 0)
    0
  • Bloke2
    When I log in to Cpanel it shows version 11.50.0 (build 20) so I guess its updated now? Did something get fixed after it failed and now its ok?
    0
  • cPanelMichael
    Hello :) It's possible a custom version of the "wget" package is installed on your system. Please post the output from the following commands (post the results in CODE tags):
    wget --version grep wget /etc/yum.conf
    Thank you.
    0
  • Bloke2

    GNU Wget 1.12 built on linux-gnu. +digest +ipv6 +nls +ntlm +opie +md5/openssl +https -gnutls +openssl -iri Wgetrc: /etc/wgetrc (system) Locale: /usr/share/locale Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" -DLOCALEDIR="/usr/share/locale" -I. -I../lib -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -fno-strict-aliasing Link: gcc -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic -fno-strict-aliasing -Wl,-z,relro -lssl -lcrypto /usr/lib64/libssl.so /usr/lib64/libcrypto.so -ldl -lrt ftp-opie.o openssl.o http-ntlm.o gen-md5.o ../lib/libgnu.a Copyright " 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later . This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Originally written by Hrvoje Nik"i? . Currently maintained by Micah Cowan . Please send bug reports and questions to . xxxx@ip-000-00-00-00 [~]# grep wget /etc/yum.conf
    0
  • cPanelMichael
    Hello :) Please post the output from the following two commands:
    wget https://securedownloads.cpanel.net/cPanelPublicKey.asc -O /dev/null wget --no-check-certificate https://securedownloads.cpanel.net/cPanelPublicKey.asc -O /dev/null
    Thank you.
    0
  • Bloke2

    wget https://securedownloads.cpanel.net/cPanelPublicKey.asc -O /dev/null --2015-07-10 11:22:39-- https://securedownloads.cpanel.net/cPanelPublicKey.asc Resolving securedownloads.cpanel.net... 74.125.44, 208.74.121.38 Connecting to securedownloads.cpanel.net|208.74.125.44|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 20029 (20K) [text/plain] Saving to: "/dev/null" 100%[======================================>] 20,029 --.-K/s in 0.05s 2015-07-10 11:22:39 (374 KB/s) - "/dev/null" saved [20029/20029]

    wget --no-check-certificate https://securedownloads.cpanel.net/cPanelPublicKey.asc -O /dev/null --2015-07-10 11:25:41-- https://securedownloads.cpanel.net/cPanelPublicKey.asc Resolving securedownloads.cpanel.net... 74.121.38, 208.74.125.44 Connecting to securedownloads.cpanel.net|74.121.38|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 20029 (20K) [text/plain] Saving to: "/dev/null" 100%[======================================>] 20,029 --.-K/s in 0.03s 2015-07-10 11:25:41 (667 KB/s) - "/dev/null" saved [20029/20029]
    0
  • cPanelMichael
    Hello :) I'm not seeing any indication that you should experience further problems. Feel free to let us know if cPanel updates continue to fail. Thank you.
    0
  • adtastichosting
    I'm having a similar issue. current version is 11.5.0.27 Pertinent parts of the message are: Unable to download public key from vendor: cpanel No output returned by 'wget'. FATAL: Unable to retrieve tier version info: Failed to create gpg object: No keys found for vendor 'cpanel' If I go to update prerferences in whm I get: A fatal error or timeout occurred while processing this directive. exit level [die] [pid=4931] (Unable to retrieve tier version info: exit level [die] [pid=4931] (Failed to create gpg object: No keys found for vendor 'cpanel' Please see the only message that seems relevant says The pubkey download process can be run manually with the "/usr/local/cpanel/scripts/updatesigningkey" script however running that does nothing.
    0
  • TerranceR
    Hello, adtastichosting: Without doing some more diagnosing I am just taking a random stab at this, if this doesn't work for you, you may want to submit a ticket so we can look into this furter. You may want to try the below commands: mv /etc/pki/tls/certs/ca-bundle.crt{,.cpbak} yum reinstall ca-certificates Afer this is complete try running UPCP again.
    0
  • adtastichosting
    Hello, adtastichosting: Without doing some more diagnosing I am just taking a random stab at this, if this doesn't work for you, you may want to submit a ticket so we can look into this furter. You may want to try the below commands: mv /etc/pki/tls/certs/ca-bundle.crt{,.cpbak} yum reinstall ca-certificates Afer this is complete try running UPCP again.

    tried your suggestion get this: Loaded plugins: fastestmirror Setting up Reinstall Process Loading mirror speeds from cached hostfile * base: bay.uchicago.edu * extras: mirror.beyondhosting.net * updates: mirror.evolvedservers.com Excluding Packages in global exclude list Finished No Match for argument: ca-certificates Nothing to do
    0
  • TerranceR
    tried your suggestion get this: Loaded plugins: fastestmirror Setting up Reinstall Process Loading mirror speeds from cached hostfile * base: bay.uchicago.edu * extras: mirror.beyondhosting.net * updates: mirror.evolvedservers.com Excluding Packages in global exclude list Finished No Match for argument: ca-certificates Nothing to do

    I would suggest that you submit a ticket so that we can take a look have you tried running the WGET commands above?
    Hello :) Please post the output from the following two commands:
    wget https://securedownloads.cpanel.net/cPanelPublicKey.asc -O /dev/null wget --no-check-certificate https://securedownloads.cpanel.net/cPanelPublicKey.asc -O /dev/null
    Thank you.

    0
  • adtastichosting
    I would suggest that you submit a ticket so that we can take a look have you tried running the WGET commands above?

    The problem becomes self evident :):
    root [/]# wget : HTTPS support not compiled in. root [/]# wget --no-check-certificate
    0
  • TerranceR
    Hello, Looks like a custom compiled/installed version of wget, you will need to remove the custom version and reinstall the stock OS provided RPM.
    0
  • adtastichosting
    That's what I figured. Since you obviously have more experience with this than I do, still learning my way around here, any advice on what I need to do specifically?
    0
  • TerranceR
    Hello, Do you still have the source tarball on the server? If so you can cd in to the directory of the source and make uninstall, you can then use yum reinstall wget to reinstall the original source after the custom installed version is removed. If you do not have the source on your server anymore, you can type "whereis wget" and remove all of the results from that command via "mv /path/to/wget /path/to/wget.bak" and then "yum reinstall wget" if you need help with this feel free to submit a ticket and we will be more then happy to take a look at this for you
    0
  • adtastichosting
    ok removed wget.: which wget which: no wget in (/usr/local/jdk/bin:/usr/kerberos/sbin:/usr/kerberos/bin:/usr/lib/courier-imap/sbin:/usr/lib/courier-imap/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin:/usr/local/bin:/usr/X11R6/bin:/root/bin:/opt/bin) no try to reinstall wget: yum install wget gets this: root [/]# yum install wget Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: mirror.steadfast.net * extras: centos.mirrors.tds.net * updates: mirrors.gigenet.com Excluding Packages in global exclude list Finished Setting up Install Process Nothing to do
    0
  • ModServ
    What's the output of
    grep -i wget /etc/yum.conf
    0
  • adtastichosting
    exclude=bind-chroot courier* dovecot* exim* filesystem httpd* mod_ssl* mydns* mysql* nsd* php* proftpd* pure-ftpd* spamassassin* squirrelmail* wget*
    0
  • ModServ
    Edit the file and remove the last word "wget*" then install wget again:
    yum install wget
    0
  • adtastichosting
    get this: root [/]# yum reinstall wget Loaded plugins: fastestmirror Setting up Reinstall Process Loading mirror speeds from cached hostfile * base: yum.tamu.edu * extras: mirror.evolvedservers.com * updates: mirror.vcu.edu Excluding Packages in global exclude list Finished Installed package wget-1.11.4-2.el5_4.1.x86_64 not available. Nothing to do root [/]# _
    0
  • ModServ
    What's the output of this command?
    rpm -qa | grep wget
    0
  • adtastichosting
    root [/]# rpm -qa | grep wget wget-1.11.4-2.el5_4.1 root [/]# _
    0
  • ModServ
    Remove it first:
    rpm -e --nodeps wget-1.11.4-2.el5_4.1
    Then install it again:
    yum install wget
    0
  • adtastichosting
    ok installed wget. tried update:
    [2015-08-02 20:46:59 -0500] W Unable to download public key from vendor: cpanel, category: release, url: https://securedownloads.cpanel.net/cPanelPublicKey.asc [2015-08-02 20:46:59 -0500] W Failure code returned by 'wget': 1 at /usr/local/cpanel/Cpanel/Crypt/GPG/VendorKeys.pm line 483. [2015-08-02 20:47:00 -0500] W Unable to download public key from vendor: cpanel, category: development, url: https://securedownloads.cpanel.net/cPanelDevelopmentKey.asc [2015-08-02 20:47:00 -0500] W Failure code returned by 'wget': 1 at /usr/local/cpanel/Cpanel/Crypt/GPG/VendorKeys.pm line 483. [2015-08-02 20:47:00 -0500] W Unable to download public key from vendor: cpanel, category: development-sts, url: https://securedownloads.cpanel.net/STSTestKey.asc [2015-08-02 20:47:00 -0500] W Failure code returned by 'wget': 1 at /usr/local/cpanel/Cpanel/Crypt/GPG/VendorKeys.pm line 483. [2015-08-02 20:47:00 -0500] W Failed to download all specified public keys. [2015-08-02 20:47:00 -0500] Detected version '11.50.0.27' from version file. [2015-08-02 20:47:00 -0500] Running version '11.50.0.27' of updatenow. [2015-08-02 20:47:00 -0500] ***** FATAL: Unable to retrieve tier version info: Failed to create gpg object: No keys found for vendor 'cpanel' Please see http://go.cpanel.net/sigerrors for further information about this error. [2015-08-02 20:47:00 -0500] The Administrator will be notified to review this output when this script completes => Log closed Sun Aug 2 20:47:00 2015 [2015-08-02 20:47:00 -0500] E Running `/usr/local/cpanel/scripts/updatenow --upcp --log=/var/cpanel/updatelogs/update.1438566417.log` failed, exited with code 255 (signal = 0) => Log closed Sun Aug 2 20:47:01 2015
    0
  • ModServ
    Do this:
    /usr/local/cpanel/scripts/updatesigningkey
    Then update again.
    0
  • adtastichosting
    did that still get:
    ---------------------------------------------------------------------------------------------------- => Log opened from /usr/local/cpanel/scripts/updatenow (26364) at Sun Aug 2 20:58:22 2015 [2015-08-02 20:58:23 -0500] W Unable to download public key from vendor: cpanel, category: release, url: https://securedownloads.cpanel.net/cPanelPublicKey.asc [2015-08-02 20:58:23 -0500] W Failure code returned by 'wget': 1 at /usr/local/cpanel/Cpanel/Crypt/GPG/VendorKeys.pm line 483. [2015-08-02 20:58:23 -0500] W Unable to download public key from vendor: cpanel, category: development, url: https://securedownloads.cpanel.net/cPanelDevelopmentKey.asc [2015-08-02 20:58:23 -0500] W Failure code returned by 'wget': 1 at /usr/local/cpanel/Cpanel/Crypt/GPG/VendorKeys.pm line 483. [2015-08-02 20:58:23 -0500] W Unable to download public key from vendor: cpanel, category: development-sts, url: https://securedownloads.cpanel.net/STSTestKey.asc [2015-08-02 20:58:23 -0500] W Failure code returned by 'wget': 1 at /usr/local/cpanel/Cpanel/Crypt/GPG/VendorKeys.pm line 483. [2015-08-02 20:58:23 -0500] W Failed to download all specified public keys. [2015-08-02 20:58:23 -0500] Detected version '11.50.0.27' from version file. [2015-08-02 20:58:23 -0500] Running version '11.50.0.27' of updatenow. [2015-08-02 20:58:23 -0500] ***** FATAL: Unable to retrieve tier version info: Failed to create gpg object: No keys found for vendor 'cpanel' Please see http://go.cpanel.net/sigerrors for further information about this error. [2015-08-02 20:58:23 -0500] The Administrator will be notified to review this output when this script completes => Log closed Sun Aug 2 20:58:23 2015 [2015-08-02 20:58:24 -0500] E Running `/usr/local/cpanel/scripts/updatenow --upcp --log=/var/cpanel/updatelogs/update.1438567101.log` failed, exited with code 255 (signal = 0) => Log closed Sun Aug 2 20:58:24 2015
    0
  • adtastichosting

    root [/]# wget https://securedownloads.cpanel.net/STSTestKey.asc --2015-08-02 21:10:47-- https://securedownloads.cpanel.net/STSTestKey.asc Resolving securedownloads.cpanel.net... 208.74.125.44, 208.74.121.38 Connecting to securedownloads.cpanel.net|208.74.125.44|:443... connected. ERROR: cannot verify securedownloads.cpanel.net's certificate, issued by `/C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2': Self-signed certificate encountered. To connect to securedownloads.cpanel.net insecurely, use `--no-check-certificate'.
    Unable to establish SSL connection. root [/]# _
    0
  • ModServ
    Try this:
    mv /etc/pki/tls/certs/ca-bundle.crt{,.cpbak} yum reinstall ca-certificates
    Then do this:
    wget --no-check-certificate https://securedownloads.cpanel.net/STSTestKey.asc
    If that doesn't work with you, then you really need to Submit a Support Ticket.
    0
  • adtastichosting
    yes looks like will have to open a support ticket. appreciate all your help though.
    0

Please sign in to leave a comment.