Unable to undbundle the package

[Ruelb2214]

Hi,

We recently purchase 2xSNS-3755-K9 appliance, and it comes with version 3.2 then we patch it until patch 7 version.

Then we want to upgrade to version 3.3, health checks all GREEN but we face the issue:

"Unable to unbundle the package. It should be tar.gz file format Application upgrade preparation failed".

It's clear to us the filename was tar.gz format and MD5 value is correct. We download multiple times the upgrade file but same issue.

We use repository with FTP protocol and even use local disk.

I have open TAC case, and the only response was to re-image to version 3.0, this is insane suggestion from support.

Do you experience this issue before?

[marce1000]

  - Check the output from  show logging system ade/ADE.log after trying
  - Check if all partitions on the ISE node have sufficient disk space
  - Could you try to open the tar.gz on Windows (with Winzip or other)  to further check it's integrity ?
  - Could you try this methodology : application upgrade prepare <upgrade bundle name> <repository name>   
                                                       application upgrade proceed 

    + Get TAC 's attention to invalid answers

  M.

[Ruelb2214]

@marce1000 in addition there is no problem with the disk, there's enough space.

I open the file.tar.gz in Windows or unzip it no problem at all.

MD5 check no issue.

[Ruelb2214]

@marce1000 so we end up re-imaging our 2xSNS3700 appliance to version 3.3.

behold when we upgrade to version 3.3 patch 4 (both nodes are standalone temporary) it's the same error, we download the file through 3 different laptops but the same result.

#patch install ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz FTP
% Warning: Patch will be installed only on this node. Install using Primary Administration node GUI to install on all nodes in deployment. Continue? (yes/no) [yes] ? yes
Initiating Application Patch installation...

Getting bundle to local machine...
Unbundling Application Package...
% Unable to unbundle the package. It should be in tar.gz file format

This is insane product, I have never experience this in version 2.x !!!!!!!

I have attached the logs maybe you can help me on this.

[marce1000]

 @Ruelb2214  I want some clarification from these in  logs-ade.txt
  Illegal characters or double dots not found in name ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz
  Illegal characters or double dots not found in name FTP

    - Further more your command is patch install ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz FTP
       Is the repository named FTP : is it local or remote ?
                                                     is it accessed through the FTP protocol?
      Check the logs on the FTP server if FTP is used ,and check if the correct filename is accessed
      with that name , if needed use the FTP server in verbose or debug mode (if applicable)

      Try to give the patch bundle  a different and simple name such as patch.tar.gz
      Use another repository name on ISE and not FTP , to avoid confusion within ISE.

  M.

[Ruelb2214]

Hi @marce1000 

so I rename the repository and put the FTP server to the same subnet with ISE.

The FTP server is accessible through FTP protocol as other server is using it also, I did a debug from FTP server and its says transfer successful.

I tried open the file .tar.gz on Windows and unzip no issue at all.

Below the ADE logs, and its showing error code: -601

Attached file the Md5 value comparison and not issue it's match.

2025-03-17T12:05:35.086787+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] transfer: cars_xfer.c[166] [system]: ftp copy in of ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz requested

2025-03-17T12:05:40.111728+08:00 xxA7ISE01 kong-error 2025/03/17 12:05:40 [info] 59#0: *47828024 SSL_do_handshake() failed (SSL: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown:SSL alert number 46) while SSL handshaking, client: 10.54.x.x, server: 0.0.0.0:8443

2025-03-17T12:06:02.700566+08:00 xxA7ISE01 journal[1410]: | 2025-03-17 04:06:02,700 | INFO | 1410 | MainThread | key_manager_server.py:329 | api: decrypt called |

2025-03-17T12:06:02.701005+08:00 xxA7ISE01 journal[1410]: | 2025-03-17 04:06:02,700 | INFO | 1410 | MainThread | web_log.py:206 | [17/Mar/2025:04:06:02 +0000] "POST /api/system/v1/key-manager/decrypt HTTP/1.1" 200 195 "-" "curl/7.61.1" |

2025-03-17T12:06:22.804704+08:00 xxA7ISE01 kong-error 2025/03/17 12:06:22 [info] 54#0: *47836898 client 10.32.x.x closed keepalive connection

2025-03-17T12:06:30.680694+08:00 xxA7ISE01 root: info:[application:operation:platformproperties.sh] Old Memory Size : 98097152

2025-03-17T12:06:32.617071+08:00 xxA7ISE01 root: TLSv1.0/TLS1.1 value from db 0 and 0 respectively

2025-03-17T12:06:32.619212+08:00 xxA7ISE01 root: Allow ALL SHA1 ciphers value from db 0

2025-03-17T12:06:32.621343+08:00 xxA7ISE01 root: Allow Only SHA1 with AES 128 ciphers value from db 0

2025-03-17T12:06:32.623347+08:00 xxA7ISE01 root: Min and Max TLS version from DB 1.2 and 1.2

2025-03-17T12:06:33.115047+08:00 xxA7ISE01 root: info:[application:operation:edda-control.sh] PRIMARY

2025-03-17T12:06:33.401351+08:00 xxA7ISE01 root: info:[application:operation:sp-hub-control.sh] Container run status

2025-03-17T12:06:33.526886+08:00 xxA7ISE01 root: info:[application:operation:ropc-control.sh] Container run status

2025-03-17T12:06:59.648351+08:00 xxA7ISE01 kong-error 2025/03/17 12:06:59 [info] 24#0: *47844566 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:18.596766+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:18 [info] 26#0: *47846419 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:18.607446+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:18 [info] 55#0: *47846457 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:18.609497+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:18 [info] 39#0: *47846460 client 10.36.x.x closed keepalive connection

2025-03-17T12:07:39.844750+08:00 xxA7ISE01 kong-error 2025/03/17 12:07:39 [info] 57#0: *47852918 client 10.32.x.x closed keepalive connection

2025-03-17T12:08:32.241820+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] transfer: cars_xfer_util.c[2654] [system]: Properties file /tmp/.cars_repodownload.props exists need to cleanup after a SIGNAL or download complete

2025-03-17T12:08:32.242123+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] application:install cars_install.c[2794] [system]: Got bundle at - /storeddata/Installing/.1742184334/ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz

2025-03-17T12:08:32.267833+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] application:install cars_install.c[2867] [system]: Unbundling package ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz

2025-03-17T12:08:39.965553+08:00 xxA7ISE01 CARSSetup[2454542]: ADEAUDIT 2032, type=PATCH INSTALL, name=PATCH INSTALL FAILED, username=system, cause=Application patch install failed, adminipaddress=127.0.0.1, interface=CLI, detail=Could not unbundle package ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz from repository SIMPLE-SERVER

2025-03-17T12:08:39.965582+08:00 xxA7ISE01 CARSSetup[2454542]: ADEAUDIT 3019, type=PATCH INSTALL, name=PATCH INSTALL FAILED, username=system, cause=Error during application patch install, adminipaddress=127.0.0.1, interface=CLI, detail=Could not unbundle package ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz from repository SIMPLE-SERVER

2025-03-17T12:08:39.965674+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[error] application:install cars_install.c[2878] [system]: Could not Unbundle Pkg ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz from repo SIMPLE-SERVER, err = #012gzip: stdin: unexpected end of file#012tar: Unexpected EOF in archive#012tar: Unexpected EOF in archive#012tar: Error is not recoverable: exiting now

2025-03-17T12:08:40.346916+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[info] application:install cars_install.c[6235] [system]: error message: Unable to unbundle the package. It should be in tar.gz file format

2025-03-17T12:08:40.346937+08:00 xxA7ISE01 ADE-SERVICE[1922]: [2454542]:[error] application:install cars_install.c[6238] [system]: Error while Installing - Patch bundle: ise-patchbundle-3.3.0.430-Patch4-24102504.SPA.x86_64.tar.gz Repository: SIMPLE-SERVER ErrorCode: -601

2025-03-17T12:09:34.360417+08:00 xxA7ISE01 kong-error 2025/03/17 12:09:34 [info] 29#0: *47876736 client 10.32.x.x closed keepalive connection

[marce1000]

 - @Ruelb2214   (from ADE logs) :              >...SSL alert number 46) while SSL handshaking
                                                     Strange it seems that the repository is SFTP based , could you try with a 
                                                     simple FTP repository : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/215348-how-to-configure-repository-on-identity.html

 M.

  M.

[Ruelb2214]

@marce1000 is there a way if we could just connect a thumb drive directly in ISE and mount it? instead of using ftp/sftp file transfer?

[marce1000 · Accepted solution]

 - @Ruelb2214   No that is not supported within ISE. If the ISE node would be a VM , then there are other possibilities such as mounting it's partitions on another host   or the reverse

  M.