topic Re: Unable to undbundle the package in Network Access Control

Unable to undbundle the package

Ruelb2214 — Tue, 11 Mar 2025 09:34:35 GMT

Hi,

We recently purchase 2xSNS-3755-K9 appliance, and it comes with version 3.2 then we patch it until patch 7 version.

Then we want to upgrade to version 3.3, health checks all GREEN but we face the issue:

"Unable to unbundle the package. It should be tar.gz file format Application upgrade preparation failed".

It's clear to us the filename was tar.gz format and MD5 value is correct. We download multiple times the upgrade file but same issue.

We use repository with FTP protocol and even use local disk.

I have open TAC case, and the only response was to re-image to version 3.0, this is insane suggestion from support.

Do you experience this issue before?

Re: Unable to undbundle the package

Mark Elsen — Tue, 11 Mar 2025 10:15:06 GMT

- Check the output from show logging system ade/ADE.log after trying
- Check if all partitions on the ISE node have sufficient disk space
- Could you try to open the tar.gz on Windows (with Winzip or other) to further check it's integrity ?
- Could you try this methodology : application upgrade prepare <upgrade bundle name> <repository name>
application upgrade proceed

+ Get TAC 's attention to invalid answers

Re: Unable to undbundle the package

Ruelb2214 — Fri, 14 Mar 2025 06:45:39 GMT

@Mark Elsen so we end up re-imaging our 2xSNS3700 appliance to version 3.3.

behold when we upgrade to version 3.3 patch 4 (both nodes are standalone temporary) it's the same error, we download the file through 3 different laptops but the same result.

#patch install ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz FTP
% Warning: Patch will be installed only on this node. Install using Primary Administration node GUI to install on all nodes in deployment. Continue? (yes/no) [yes] ? yes
Initiating Application Patch installation...

Getting bundle to local machine...
Unbundling Application Package...
% Unable to unbundle the package. It should be in tar.gz file format

This is insane product, I have never experience this in version 2.x !!!!!!!

I have attached the logs maybe you can help me on this.

Re: Unable to undbundle the package

Ruelb2214 — Fri, 14 Mar 2025 06:47:34 GMT

@Mark Elsen in addition there is no problem with the disk, there's enough space.

I open the file.tar.gz in Windows or unzip it no problem at all.

MD5 check no issue.

Re: Unable to undbundle the package

Mark Elsen — Fri, 14 Mar 2025 09:02:55 GMT

@Ruelb2214 I want some clarification from these in logs-ade.txt
Illegal characters or double dots not found in name ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz
Illegal characters or double dots not found in name FTP

- Further more your command is patch install ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz FTP
Is the repository named FTP : is it local or remote ?
is it accessed through the FTP protocol?
Check the logs on the FTP server if FTP is used ,and check if the correct filename is accessed
with that name , if needed use the FTP server in verbose or debug mode (if applicable)

Try to give the patch bundle a different and simple name such as patch.tar.gz
Use another repository name on ISE and not FTP , to avoid confusion within ISE.

Re: Unable to undbundle the package

Ruelb2214 — Mon, 17 Mar 2025 04:53:49 GMT

Hi @Mark Elsen

so I rename the repository and put the FTP server to the same subnet with ISE.

The FTP server is accessible through FTP protocol as other server is using it also, I did a debug from FTP server and its says transfer successful.

I tried open the file .tar.gz on Windows and unzip no issue at all.

Below the ADE logs, and its showing error code: -601

Attached file the Md5 value comparison and not issue it's match.

2025-03-17T12:05:35.086787+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] transfer: cars_xfer.c[166] [system]: ftp copy in of ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz requested

2025-03-17T12:05:40.111728+08:00 xxA7ISE01 kong-error 2025/03/17 12:05:40 [info] 59#0: *47828024 SSL_do_handshake() failed (SSL: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:SSL alert number 46) while SSL handshaking, client: 10.54.x.x, server: 0.0.0.0:8443

2025-03-17T12:06:22.804704+08:00 xxA7ISE01 kong-error 2025/03/17 12:06:22 [info] 54#0: *47836898 client 10.32.x.x closed keepalive connection

2025-03-17T12:06:30.680694+08:00 xxA7ISE01 root: info:[application:operation:platformproperties.sh] Old Memory Size : 98097152

2025-03-17T12:06:32.617071+08:00 xxA7ISE01 root: TLSv1.0/TLS1.1 value from db 0 and 0 respectively

2025-03-17T12:06:32.619212+08:00 xxA7ISE01 root: Allow ALL SHA1 ciphers value from db 0

2025-03-17T12:06:32.621343+08:00 xxA7ISE01 root: Allow Only SHA1 with AES 128 ciphers value from db 0

2025-03-17T12:06:32.623347+08:00 xxA7ISE01 root: Min and Max TLS version from DB 1.2 and 1.2

2025-03-17T12:06:33.115047+08:00 xxA7ISE01 root: info:[application:operation:edda-control.sh] PRIMARY

2025-03-17T12:06:33.401351+08:00 xxA7ISE01 root: info:[application:operation:sp-hub-control.sh] Container run status

2025-03-17T12:06:33.526886+08:00 xxA7ISE01 root: info:[application:operation:ropc-control.sh] Container run status

2025-03-17T12:06:59.648351+08:00 xxA7ISE01 kong-error 2025/03/17 12:06:59 [info] 24#0: *47844566 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:18.596766+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:18 [info] 26#0: *47846419 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:18.607446+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:18 [info] 55#0: *47846457 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:18.609497+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:18 [info] 39#0: *47846460 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:39.844750+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:39 [info] 57#0: *47852918 client 10.32.x.x closed keepalive connection

2025-03-17T12:08:32.241820+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] transfer: cars_xfer_util.c[2654] [system]: Properties file /tmp/.cars_repodownload.props exists need to cleanup after a SIGNAL or download complete

2025-03-17T12:08:32.242123+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] application:install cars_install.c[2794] [system]: Got bundle at - /storeddata/Installing/.1742184334/ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz

2025-03-17T12:08:32.267833+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] application:install cars_install.c[2867] [system]: Unbundling package ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz

2025-03-17T12:08:39.965553+08:00 xxA7ISE01 CARSSetup[2454542]: ADEAUDIT 2032, type=PATCH INSTALL, name=PATCH INSTALL FAILED, username=system, cause=Application patch install failed, adminipaddress=127.0.0.1, interface=CLI, detail=Could not unbundle package ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz from repository SIMPLE-SERVER

2025-03-17T12:08:39.965582+08:00 xxA7ISE01 CARSSetup[2454542]: ADEAUDIT 3019, type=PATCH INSTALL, name=PATCH INSTALL FAILED, username=system, cause=Error during application patch install, adminipaddress=127.0.0.1, interface=CLI, detail=Could not unbundle package ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz from repository SIMPLE-SERVER

2025-03-17T12:08:39.965674+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[error] application:install cars_install.c[2878] [system]: Could not Unbundle Pkg ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz from repo SIMPLE-SERVER, err = #012gzip: stdin: unexpected end of file#012tar: Unexpected EOF in archive#012tar: Unexpected EOF in archive#012tar: Error is not recoverable: exiting now

2025-03-17T12:08:40.346916+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] application:install cars_install.c[6235] [system]: error message: Unable to unbundle the package. It should be in tar.gz file format

2025-03-17T12:08:40.346937+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[error] application:install cars_install.c[6238] [system]: Error while Installing - Patch bundle: ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz Repository: SIMPLE-SERVER ErrorCode: -601

2025-03-17T12:09:34.360417+08:00 xxA7ISE01 kong-error 2025/03/17 12:09:34 [info] 29#0: *47876736 client 10.32.x.x closed keepalive connection

Re: Unable to undbundle the package

Mark Elsen — Mon, 17 Mar 2025 07:40:51 GMT

- @Ruelb2214 (from ADE logs) : >...SSL alert number 46) while SSL handshaking
Strange it seems that the repository is SFTP based , could you try with a
simple FTP repository : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/215348-how-to-configure-repository-on-identity.html

Re: Unable to undbundle the package

Ruelb2214 — Mon, 17 Mar 2025 08:00:28 GMT

@Mark Elsen is there a way if we could just connect a thumb drive directly in ISE and mount it? instead of using ftp/sftp file transfer?

Re: Unable to undbundle the package

Mark Elsen — Mon, 17 Mar 2025 09:48:01 GMT

- @Ruelb2214 No that is not supported within ISE. If the ISE node would be a VM , then there are other possibilities such as mounting it's partitions on another host or the reverse

Re: Unable to undbundle the package

jkaemmerlen — Sat, 21 Mar 2026 03:42:10 GMT

ISE 3.3 patch 7 attempting to install patch 10. Facing same issue.
Configured Local Disk repository. Copied patch tar.gz file ftp to local disk. attempt to run patch install
Same % unable to unbundle the package. It should be in the tar.gz file format.

It is in the tar.gz file format. And we verified MD5 and SHA512.

Re: Unable to undbundle the package

Jatin Katyal — Sat, 21 Mar 2026 05:33:39 GMT

Sometimes re-downloading the patch files works.
Also, Try again and look at the logs

sh logging system ade/ADE.log tail