Hello,
I'm experiencing an issue with Centreon 25.10.18 where Centreon Broker fails to start after exporting/reloading the configuration.
_Environment:_
Oracle Linux 8
centreon-web-25.10.18-1.el8
centreon-central-25.10.18-1.el8
centreon-broker-25.10.14-1.el8
centreon-broker-cbd-25.10.14-1.el8
centreon-engine-25.10.14-1.el8
centreon-engine-daemon-25.10.14-1.el8
centreon-gorgone-25.10.10-1.el8
The database is running on AWS RDS.
_Problem:_
After exporting/reloading the poller configuration, the db_password in:
/etc/centreon-broker/central-broker.json
is generated as an encrypted value:
"db_password": "encrypt::..."
When cbd is restarted, central-broker-master immediately exits with:
[config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
The watchdog then continuously tries to restart central-broker-master.
Troubleshooting performed:
- Database connectivity to port 3306 is working.
- The database credentials are valid and a manual connection to centreon_storage works.
- Re-entering the database password in the Centreon UI and exporting the configuration again does not solve the issue.
- /usr/share/centreon/bin/writeEngineSecrets.sh was executed successfully to regenerate /etc/centreon-engine/engine-context.json.
- After regenerating engine-context.json and exporting the configuration again, the issue remains.
- The upgrade to centreon-web 25.10.18 and centreon-broker 25.10.14 did not resolve the issue.
_Workaround:_
If I manually replace the encrypted db_password in central-broker.json with the same password in plaintext, cbd starts successfully and both central-broker-master and central-rrd-master run normally.
The issue can be reproduced consistently:
1. Put the database password in plaintext in central-broker.json.
2. Restart cbd -> Broker starts successfully.
3. Export/reload the poller configuration from Centreon.
4. db_password is replaced with an encrypt:: value.
5. Restart cbd.
6. central-broker-master fails immediately with "bad decrypt".
This appears related to the password encryption/export issue mentioned as fixed in Centreon Web 25.10.17, but the issue is still reproducible with Centreon Web 25.10.18 and Broker 25.10.14.
_Outputs:_
[root@centreon ~]# rpm -qa | grep centreon | sort
centreon-auto-discovery-server-25.10.9-1.el8.noarch
centreon-broker-25.10.14-1.el8.x86_64
centreon-broker-cbd-25.10.14-1.el8.x86_64
centreon-broker-core-25.10.14-1.el8.x86_64
centreon-central-25.10.18-1.el8.noarch
centreon-clib-25.10.14-1.el8.x86_64
centreon-common-25.10.0-1.el8.noarch
centreon-connector-25.10.14-1.el8.x86_64
centreon-connector-perl-25.10.14-1.el8.x86_64
centreon-connector-ssh-25.10.14-1.el8.x86_64
centreon-engine-25.10.14-1.el8.x86_64
centreon-engine-daemon-25.10.14-1.el8.x86_64
centreon-engine-opentelemetry-25.10.14-1.el8.x86_64
centreon-gorgone-25.10.10-1.el8.noarch
centreon-gorgone-centreon-config-25.10.10-1.el8.noarch
centreon-it-edition-extensions-25.10.9-1.el8.noarch
centreon-license-manager-25.10.9-1.el8.noarch
centreon-license-manager-common-25.10.9-1.el8.noarch
centreon-perl-libs-25.10.10-1.el8.noarch
centreon-perl-libs-common-25.10.10-1.el8.noarch
centreon-plugin-Applications-Databases-Mysql-20261000-1.el8.noarch
centreon-plugin-Applications-Monitoring-Centreon-Central-20261000-1.el8.noarch
centreon-plugin-Applications-Monitoring-Centreon-Database-20261000-1.el8.noarch
centreon-plugin-Applications-Monitoring-Centreon-Map4-Jmx-20261000-1.el8.noarch
centreon-plugin-Applications-Monitoring-Centreon-Poller-20261000-1.el8.noarch
centreon-plugin-Applications-Protocol-Dns-20261000-1.el8.noarch
centreon-plugin-Applications-Protocol-Ftp-20261000-1.el8.noarch
centreon-plugin-Applications-Protocol-Http-20261000-1.el8.noarch
centreon-plugin-Applications-Protocol-Ldap-20261000-1.el8.noarch
centreon-plugin-Hardware-Printers-Generic-Snmp-20261000-1.el8.noarch
centreon-plugin-Hardware-Ups-Standard-Rfc1628-Snmp-20261000-1.el8.noarch
centreon-plugin-Network-Cisco-Standard-Snmp-20261000-1.el8.noarch
centreon-plugin-Operatingsystems-Linux-Snmp-20261000-1.el8.noarch
centreon-plugin-Operatingsystems-Windows-Snmp-20261000-1.el8.noarch
centreon-poller-25.10.18-1.el8.noarch
centreon-pp-manager-25.10.7-1.el8.noarch
centreon-protobuf-lib-25.10.14-1.el8.x86_64
centreon-trap-25.10.18-1.el8.noarch
centreon-web-25.10.18-1.el8.noarch
[root@centreon ~]# cat /etc/redhat-release
Red Hat Enterprise Linux release 8.10 (Ootpa)
[root@centreon ~]# grep db_password /etc/centreon-broker/central-broker.json.val
"db_password": "encrypt::EDITED>",
[root@centreon ~]# grep error /var/log/centreon-broker/central-broker-master.log
[2026-10-26T18:34:41.441+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:41.441+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:46.441+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:46.441+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:51.443+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:51.443+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:56.443+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
[2026-10-26T18:34:56.443+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt