[25.10.18] Broker fails with "No usable encrypted password: bad decrypt" after configuration export

Question

Hello,I'm experiencing an issue with Centreon 25.10.18 where Centreon Broker fails to start after exporting/reloading the configuration._Environment:_Oracle Linux 8centreon-web-25.10.18-1.el8centreon-central-25.10.18-1.el8centreon-broker-25.10.14-1.el8centreon-broker-cbd-25.10.14-1.el8centreon-engine-25.10.14-1.el8centreon-engine-daemon-25.10.14-1.el8centreon-gorgone-25.10.10-1.el8The database is running on AWS RDS._Problem:_After exporting/reloading the poller configuration, the db_password in:/etc/centreon-broker/central-broker.jsonis generated as an encrypted value:"db_password": "encrypt::..."When cbd is restarted, central-broker-master immediately exits with:[config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decryptThe watchdog then continuously tries to restart central-broker-master.Troubleshooting performed:- Database connectivity to port 3306 is working.- The database credentials are valid and a manual connection to centreon_storage works.- Re-entering the database password in the Centreon UI and exporting the configuration again does not solve the issue.- /usr/share/centreon/bin/writeEngineSecrets.sh was executed successfully to regenerate /etc/centreon-engine/engine-context.json.- After regenerating engine-context.json and exporting the configuration again, the issue remains.- The upgrade to centreon-web 25.10.18 and centreon-broker 25.10.14 did not resolve the issue._Workaround:_If I manually replace the encrypted db_password in central-broker.json with the same password in plaintext, cbd starts successfully and both central-broker-master and central-rrd-master run normally.The issue can be reproduced consistently:1. Put the database password in plaintext in central-broker.json.2. Restart cbd -> Broker starts successfully.3. Export/reload the poller configuration from Centreon.4. db_password is replaced with an encrypt:: value.5. Restart cbd.6. central-broker-master fails immediately with "bad decrypt".This appears related to the password encryption/export issue mentioned as fixed in Centreon Web 25.10.17, but the issue is still reproducible with Centreon Web 25.10.18 and Broker 25.10.14._Outputs:_[root@centreon ~]# rpm -qa | grep centreon | sortcentreon-auto-discovery-server-25.10.9-1.el8.noarchcentreon-broker-25.10.14-1.el8.x86_64centreon-broker-cbd-25.10.14-1.el8.x86_64centreon-broker-core-25.10.14-1.el8.x86_64centreon-central-25.10.18-1.el8.noarchcentreon-clib-25.10.14-1.el8.x86_64centreon-common-25.10.0-1.el8.noarchcentreon-connector-25.10.14-1.el8.x86_64centreon-connector-perl-25.10.14-1.el8.x86_64centreon-connector-ssh-25.10.14-1.el8.x86_64centreon-engine-25.10.14-1.el8.x86_64centreon-engine-daemon-25.10.14-1.el8.x86_64centreon-engine-opentelemetry-25.10.14-1.el8.x86_64centreon-gorgone-25.10.10-1.el8.noarchcentreon-gorgone-centreon-config-25.10.10-1.el8.noarchcentreon-it-edition-extensions-25.10.9-1.el8.noarchcentreon-license-manager-25.10.9-1.el8.noarchcentreon-license-manager-common-25.10.9-1.el8.noarchcentreon-perl-libs-25.10.10-1.el8.noarchcentreon-perl-libs-common-25.10.10-1.el8.noarchcentreon-plugin-Applications-Databases-Mysql-20261000-1.el8.noarchcentreon-plugin-Applications-Monitoring-Centreon-Central-20261000-1.el8.noarchcentreon-plugin-Applications-Monitoring-Centreon-Database-20261000-1.el8.noarchcentreon-plugin-Applications-Monitoring-Centreon-Map4-Jmx-20261000-1.el8.noarchcentreon-plugin-Applications-Monitoring-Centreon-Poller-20261000-1.el8.noarchcentreon-plugin-Applications-Protocol-Dns-20261000-1.el8.noarchcentreon-plugin-Applications-Protocol-Ftp-20261000-1.el8.noarchcentreon-plugin-Applications-Protocol-Http-20261000-1.el8.noarchcentreon-plugin-Applications-Protocol-Ldap-20261000-1.el8.noarchcentreon-plugin-Hardware-Printers-Generic-Snmp-20261000-1.el8.noarchcentreon-plugin-Hardware-Ups-Standard-Rfc1628-Snmp-20261000-1.el8.noarchcentreon-plugin-Network-Cisco-Standard-Snmp-20261000-1.el8.noarchcentreon-plugin-Operatingsystems-Linux-Snmp-20261000-1.el8.noarchcentreon-plugin-Operatingsystems-Windows-Snmp-20261000-1.el8.noarchcentreon-poller-25.10.18-1.el8.noarchcentreon-pp-manager-25.10.7-1.el8.noarchcentreon-protobuf-lib-25.10.14-1.el8.x86_64centreon-trap-25.10.18-1.el8.noarchcentreon-web-25.10.18-1.el8.noarch[root@centreon ~]# cat /etc/redhat-releaseRed Hat Enterprise Linux release 8.10 (Ootpa)[root@centreon ~]# grep db_password /etc/centreon-broker/central-broker.json.val                "db_password": "encrypt::EDITED>",[root@centreon ~]# grep error /var/log/centreon-broker/central-broker-master.log[2026-10-26T18:34:41.441+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:41.441+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:46.441+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:46.441+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:51.443+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:51.443+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:56.443+00:00] [config] [error] No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt[2026-10-26T18:34:56.443+00:00] [core] [error] Error during cbd exit: No usable encrypted password: Decryption finalization failed: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt

xavi_clv · Accepted Answer

Hi ​@fgbetokpanou, I rebooted the whole centreon EC2 instance and I’m no longer able to reproduce the issue. Maybe some services were still running with the old version, but with 25.10.18 everything is working fine and I can confirm that I’m not getting this issue anymore. With the encrypted password in the json file everything is up and running as expected.Thanks for your help, and sorry for the inconvenienc. You can close the ticket.

fgbetokpanou · Answer

Hi ​@xavi_clv, thank you for the detailed report and reproduction steps. This looks related to a known issue already reported in this thread (first seen in 25.10.13), where a user reported it fixed in 25.10.17. Since you still reproduce it on 25.10.18, we’ve forwarded your case to our product team to check whether it’s a remaining case of the same issue, and we’ll come back to you.

Sign up

Login to the community