WARNING: Failed to sign agent MeshService.exe: AggregateError

[dineshmhrjn]

I have deployed Meshcentral in docker using docker compose and nginx reverse proxy and certbot is in localhost. Meshcentral is running but got warnings in server.

WARNING: Failed to sign agent MeshService.exe: AggregateError
WARNING: Failed to sign agent MeshService64.exe: AggregateError
WARNING: Failed to sign agent MeshServiceARM64.exe: AggregateError
WARNING: Failed to sign agent MeshCmd.exe: AggregateError
WARNING: Failed to sign agent MeshCmd64.exe: AggregateError
WARNING: Failed to sign agent MeshCmdARM64.exe: AggregateError

Here's the docker-compose.yml
version: '3.8'

services:

  meshcentral:
    image: ghcr.io/ylianst/meshcentral:latest
    container_name: meshcentral
    volumes:
      - /opt/meshcentral-docker/meshcentral-data:/opt/meshcentral/meshcentral-data
      - /opt/meshcentral-docker/meshcentral-files:/opt/meshcentral/meshcentral-files
      - /opt/meshcentral-docker/meshcentral-web:/opt/meshcentral/meshcentral-web
      - /opt/meshcentral-docker/meshcentral-backups:/opt/meshcentral/meshcentral-backups
      - /etc/localtime:/etc/localtime:ro
    ports:
      - 800:800
      - 4430:4430
    restart: always
    environment:
      - HOSTNAME=mesh.example.com

Config.json

{
    "$schema": "https://raw.githubusercontent.com/Ylianst/MeshCentral/master/meshcentral-config-schema.json",
    "settings": {
        "mongoDB": "mongodb://credential",
        "mongoDBName": "meshcentral",
        "syslog": "meshcentral",
        "Cert": "mesh.example.com",
        "_WANonly": true,
        "_LANonly": true,
        "_sessionKey": "MyReallySecretPassword1",
        "webrtc": false,
        "_AgentSignLock": true,
        "allowHighQualityDesktop": true,
        "Port": 4430,
        "AliasPort": 443,
        "RedirPort": 800,
        "_MpsPort": 44330,
        "_MpsAliasPort": 4433,
        "_DesktopMultiplex": true,
        "AgentPong": 300,
        "TlsOffload": "172.19.10.10",
        "_TlsOffload": true,
        "_TrustedProxy": "172.19.10.10"
    },
    "domains": {
        "": {
            "certUrl": "https://172.19.10.10:443/",
            "allowedOrigin": [
                "mesh.example.com"
            ],
            "Title": "example",
            "Title2": "Meshcentral",
            "TitlePicture": "loho.png",
            "LoginPicture": "logo.png",
            "WelcomePicture": "logo.png",
            "WelcomePictureFullScreen": true,
            "agentCustomization": {
                "displayName": "textt™",
                "description": "text",
                "companyName": "text®",
                "serviceName": "text",
                "image": "logo.png",
                "fileName": "text",
                "installText": "text"
            },
            "NewAccounts": false,
            "authStrategies": {
                "azure": {
                    "newAccounts": true,
                    "clientid": "sa",
                    "clientsecret": "s",
                    "tenantid": "sd"
                }
            }
        },
        "01": {
            "Title": "example",
            "Title2": "Meshcentral",
            "agentCustomization": {
                "description": "example®",
                "companyName": "example®",
                "serviceName": "example",
                "image": "logo.png",
                "fileName": "example",
                "installText": "text"
            },
            "NewAccounts": false,
            "authStrategies": {
                "azure": {
                    "newAccounts": true,
                    "clientid": "dsad",
                    "clientsecret": "sd",
                    "tenantid": "0sd"
                }
            }
        },
        "02": {
            "Title": "example",
            "Title2": "Meshcentral",
            "agentCustomization": {
                "displayName": "text™",
                "description": "text.",
                "companyName": "text®",
                "serviceName": "text",
                "image": "logo.png",
                "fileName": "text",
                "installText": "text"
            },
            "NewAccounts": false,
            "authStrategies": {
                "azure": {
                    "newAccounts": true,
                    "clientid": "dfdsf",
                    "clientsecret": "dsfdf",
                    "tenantid": "554fdc"
                }
            }
        }
    },
    "_letsencrypt": {
        "email": "[email protected]",
        "names": "mesh.example.com",
        "skipChallengeVerification": true,
        "rsaKeySize": 3072,
        "production": false
    }
}

nginx conf.

worker_processes 1;

events {
    worker_connections 1024;
}

http {
     #HTTP server. In this example, we use a wildcard as server name.
    server {
    if ($host = mesh.example.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


        listen 80;
        server_name mesh.example.com;

        location / {
            proxy_pass http://172.19.10.10:800/;
            proxy_http_version 1.1;

            # Inform MeshCentral about the real host, port and protocol
            proxy_set_header X-Forwarded-Host $host:$server_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }


}

    # HTTPS server. In this example, we use a wildcard as server name.
    server {
        listen 443 ssl;
        server_name mesh.example.com;


        # MeshCentral uses long standing web socket connections, set longer timeouts.
        proxy_send_timeout 330s;
        proxy_read_timeout 330s;

        # We can use the MeshCentral generated certificate & key
    ssl_certificate /etc/letsencrypt/live/mesh.example.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mesh.example.com/privkey.pem; # managed by Certbot

        ssl_session_cache shared:WEBSSL:10m;
        ssl_ciphers HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers on;

        location / {
            proxy_pass http://172.19.10.10:4430/;
            proxy_http_version 1.1;

            # Allows websockets over HTTPS.
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
            proxy_set_header Host $host;

            # Inform MeshCentral about the real host, port and protocol
            proxy_set_header CF-Connecting-IP $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Host $host:$server_port;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
        }


}
}

[si458]

You have an extra comma after "WelcomePictureFullScreen": true,

Try removing it then restarting

[si458]

Is the more to your config.json that's missing/ur not sharing?

It says its installing passport and azure modules, yet u have no auth set in ur config.json from ur first post

[dineshmhrjn]

Yes, I removed the azureSSO so. but i had updated it now.

[si458]

Right. I see u have also added in all the customise bit too in the config.json

DONT USE THE TRADEMARK OR REGISTERED MARK in the agentCustomization section, I think this is why its not working.

Try removing those symbols and try restarting again

[dineshmhrjn]

Still same warnings. It was working fine when it was deployed locally.

[si458]

Tey deleting the signedagents folder and let it recopy/resign