Client: ValueError: FLEETSPEAK_COMMS_CHANNEL_INFD is not set about grr

[mbushkov]

Hey, thanks for the report! It seems that you've installed Fleetspeak-enabled version of GRR. In such a setup the GRR daemon (grrd) is started by the Fleetspeak daemon (fleetspeak-client). fleetspeak-client sets the FLEETSPEAK_COMMS_CHANNEL_INFD environment variables (and some others) so that it can communicate with grrd.

What happens if you start the fleetspeak-client (which should start grrd as a subprocess and set the right env variables)?

/usr/bin/fleetspeak-client --config /etc/fleetspeak-client/client.config

[bprykhodchenko]

Hello!
Sorry for replying a bit late. I've got married :)

Anyway, a good point made by you.
When I restart the fleetspeak client, I get the following error:

C:\Windows\System32\GRR\3.4.6.0>fleetspeak-client.exe --config fleetspeak-client.config
E0630 15:36:38.337722 3820 system_service.go:250] Unable to get revoked certificate list: unable to retrieve file, last attempt failed with: Get "https://172.16.31.5:10000/files/system/RevokedCertificates": x509: cannot validate certificate for 172.16.31.5 because it doesn't contain any IP SANs

This is a Windows Log, as I have now the same issue with my Windows agents. So the issue with OpenSuse Leap 15 is the same as with Windows.
I confirm that I have tried to reinstall GRR server on my ubuntu server and during one of the reinstallations I have changed the keys, but not the cert.
The only cert I have attached is the one for HTTPS access to Admin UI as per GRR's manual.