Copy HTTPS://x.x.x.x/dir flash: (I/O error)

[Plantern]

Hello,

I am trying to copy a file from an HTTPS (Apache2 - self signed cert) server from a CAT9300 running Cisco IOS XE Software, Version 16.12.04. I encounter the following error:

%Error opening https://10.10.10.10/hello.txt (I/O error)

200982: *Sep 28 2021 12:10:10.178 LOCAL: http_client_request:

200983: *Sep 28 2021 12:10:10.178 LOCAL: httpc_setup_request:

200984: *Sep 28 2021 12:10:10.178 LOCAL: httpc_setup_request:Source interface =

200985: *Sep 28 2021 12:10:10.178 LOCAL: http_client_process_request:

200986: *Sep 28 2021 12:10:10.178 LOCAL: http_client_process_request: host_name = 10.10.10.10

200987: *Sep 28 2021 12:10:10.178 LOCAL: http_client_process_request: transaction url = 10.229.128.54/hello.txthttpc_request: Dont have the credentials

200988: *Sep 28 2021 12:10:10.178 LOCAL: FIBipv4-packet-proc: route packet from (local) src x.x.x.x dst x.x.x.x
200989: *Sep 28 2021 12:10:10.178 LOCAL: FIBfwd-proc: packet routed by adj to Vlan1200 x.x.x.x
200990: *Sep 28 2021 12:10:10.178 LOCAL: FIBipv4-packet-proc: packet routing succeeded
200991: *Sep 28 2021 12:10:10.178 LOCAL: IP: tableid=0, s=x.x.x.x (local), d=x.x.x.x (Vlan1200) nexthop=x.x.x.x, routed via FIB
200992: *Sep 28 2021 12:10:10.178 LOCAL: IP: s=10.229.129.2 (local), d=x.x.x.x (Vlan1200), len 48, sending
200993: *Sep 28 2021 12:10:10.178 LOCAL: TCP src=47822, dst=443, seq=946866756, ack=0, win=65535 SYN

201006: *Sep 28 2021 12:10:20.178 LOCAL: http_transaction_free:

201007: *Sep 28 2021 12:10:20.178 LOCAL: http_transaction_free: freed httpc_transaction_t with id 62

201008: *Sep 28 2021 12:10:20.179 LOCAL: http_client_abort_request:
http_client_abort_request: Bad Transaction Id

I was wondering if anyone who has had this issue and has found a fix could help out. I am aware of an old post from 2013 which described a similar issue but there is no explanation on how the problem was resolved. Thanks.

p.s. IMO server side configuration (FW included) is correct. 

[balaji.bandi]

the Syntax should be  as below :

HTTPS—https:[[//username [:password]@location]/directory]/filename

worth check thing the bug : ( check the Block size)

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvq01204

[Plantern]

Thank you for your reply. I use the syntax correctly but to no avail. Or am I?

copy https://admin:admin@10.10.10.10/var/www/html/hello.txt flash:hello.txt

It seems that the error message is the same whether the credentials are used or not.

The block size bug does not apply in this instance.

[balaji.bandi]

ok are you able to use any other means to test isthe copy working on flash ?

example TFTP or FTP ?

[Plantern]

Hi,

I am currently testing exactly that. I will give an update here once testing is finished. Thank you for your reply.

[Plantern]

It seems that copying with SCP works. I am unsure how to force the device to trust the self signed apache2 cert.

[Elliot Dierksen]

Can you try it with HTTP? You mentioned that the server is using a self-signed certificate. You will have to install a trust point for the router to trust that CA.

[Plantern]

hello,

I was thinking that this most likely is the issue. I just wish there was a small guide on how to set up the trust point for the router to trust this CA (apache2). I have tried simply:

crypto pki trustpoint apache2
enrollment url https://10.10.10.10

This obviously did not work. Perhaps you would be kind to send a link that could guide me a bit in the right direction? Thank you.

[Georg Pauwen]

Hello,

not sure if the guide below is of any use, but check it out:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_pki/configuration/xe-3s/sec-pki-xe-3s-book/sec-cert-enroll-pki.html#GUID-9E48CDCB-47B3-48F3-BB20-A28B2CCC2CCE

[mgrabovs]

Hello,

Looking at the fact that we're getting I/O errors, they are directly related to a possible HW failure of the disk.

Before ruling any sort of conclusion, I suggest doing a filesystem check to the destination filesystem that you want to copy the file to.

If you want to copy the file to flash:, then the command would look like this:

# fsck flash:

Or to whatever filesystem you want to copy to:

# fsck <filesystem>

Thank you.

Marin Grabovschi

[Plantern]

Hello,

I have the same error on all network components within the network. Not only on the c9300. Everyone (all devices) seem to have the same outcome.

[Georg Pauwen]

Hello,

what exactly are you running the Apache 2 on ? I wonder if the error is caused by the server. Does that work from a 'normal' PC/laptop ?

[Plantern]

The Apache2 is ran as a VM.