I'm having issues with WAF when using updates 21.4 or newer. I get 'serious' events:
SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS Error starting application firewall: service.sh updater start failed: Traceback (most recent call last): ca-tm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/usr/local/lib/python3.9/site-packages/Crypto/Util/_raw_api.py", line 78, in <module> vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS ModuleNotFoundError: No module named 'cffi' vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS During handling of the above exception, another exception occurred: vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS Traceback (most recent call last): vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/usr/local/lib/python3.9/site-packages/cx_Freeze/initscripts/__startup__.py", line 113, in run vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/usr/local/lib/python3.9/site-packages/cx_Freeze/initscripts/Console.py", line 15, in run vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "vwaf/updater/checkpermissions.py", line 6, in <module> vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/srv/vwaf/vwaf/daemon/BasicConfig.py", line 10, in <module> vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/srv/vwaf/vwaf/daemon/aod/BasicConfigBase.py", line 9, in <module> vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/srv/vwaf/vwaf/daemon/ProcessLogging.py", line 6, in <module> vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/srv/vwaf/vwaf/daemon/Helper.py", line 13, in <module> vtm SERIOUS 22/Nov/2022:10:50:09 +0100 SERIOUS File "/srv/vwaf/vwaf/daemon/CryptoContainer.py", line 10, in <module> vtm
started with 20.1r1 on RHEL9 .. no issues
upgrade to 21.1 .. no issues 21.2 & 21.3 also no issues but everything after that is giving this exact same error (filenames/line numbers match).
Anyone else having the same issues?
from log:
ImportError: libffi.so.6: cannot open shared object file: No such file or directory
so doing "locate libffi.so"
/usr/lib64/libffi.so.8
/usr/lib64/libffi.so.8.1.0
as workaround created .6 symlinks and it does seem to work but this shouldn't happen in my opinion.