[General] VBS Deployment Script error at glpi-agent.vbs(406, 4) WinHttp.WinHttpRequest

[billgatos]

Your question

Hi all,
We have on our deployment the script to install the glpi-agent.
We got the latest VBS script from git

Were using the nightly builds.
We changed the vbs as supposed but something is wrong because we get error on line 406 WinHttp.WinHttpRequest

what have changed as today day 08/03/2023
SetupVersion = "1.5-git8529f898"
SetupNightlyLocation = "https://nightly.glpi-project.org/glpi-agent/"
SetupArchitecture = "x64" because there's no AUTO in github
SetupOptions = "/quiet RUNNOW=1 ADD_FIREWALL_EXCEPTION=1 NO_SSL_CHECK=1 RUNNOW=1 SSL_FINGERPRINT='sha256$................' SERVER='https://internal.company.pt/front/inventory.php'"
Setup = "GLPI-Agent-" & SetupVersion & "-" & SetupArchitecture & ".msi"
Repair = "Yes"

what could be the issue ?
Best regards.

[g-bougard]

Hi @billgatos,

first, you don't need to set NO_SSL_CHECK if you're using SSL_FINGERPRINT.

Second, when SetupArchitecture is set to "Auto", it means the script will detect the right arch for the computer. Nowadays, this means it will generally fix "Auto" by "x64" is the Setup var. But of course, you can set it to "x64" directly.

Then you should probably not set Repair to "Yes". Have you any reason to do it ?

Are you for the line number ? I don't see any WinHttp related code on the current l.406.

[billgatos]

Thanks for the repply.

The error happens in severall win11 but not on windows server 2016 and 2019
The idea of repair, was to upgrade the nighlty, over previous version.
The auto, is that we don't have any x86 already.

The line is 406 but i believe is not the error line, is when is called on the fuction itself

[g-bougard]

Okay, this is weird.
In principle, you don't need the Repair option. The installer always makes an "upgrade" if the full given version is different (this includes the -git* part).
Did you test it on windows 10 ? It seems the probably may be related to win11 now.

[g-bougard]

Also can describe with more details the context: how the script is started ? Has it sufficient privileges ? Where do you see the error ?
I tried the script on the Windows 11 dev evaluation image and it has no problem to download the last development build MSI file.

[billgatos]

going to test more and reply after.
Thanks once again

[billgatos]

This is my GPO

Inside the script i have:

SetupVersion = "1.5-git8529f898"
SetupLocation = "https://github.com/glpi-project/glpi-agent/releases/download/" & SetupVersion
SetupNightlyLocation = "https://nightly.glpi-project.org/glpi-agent/"
SetupArchitecture = "Auto"

SetupOptions = "/quiet RUNNOW=1 ADD_FIREWALL_EXCEPTION=1 NO_SSL_CHECK=1 RUNNOW=1 SSL_FINGERPRINT='sha256$blablabla' SERVER='https://myserver.pt/front/inventory.php'"

Setup = "GLPI-Agent-" & SetupVersion & "-" & SetupArchitecture & ".msi"

[billgatos]

Just tried again the scrip on a fresh windows 10 installation and the script gave the same error.

The autodeployment of glpi is done through a GPO at computer startup , so it has all the administrative access.
if manual i execute it on a command line with administrator privilege.

[billgatos]

hi here is the error.
sorry my fault

[billgatos]

Line 406

[billgatos]

My friend [g-bougard] problem solved, it's my super crazy antivirus from ESET , enterprise edition, problably doesn't like the way of getting the github updates.
turned off the firewall and no error.

[g-bougard]

Okay, that was the last thing I suspected.
Happy to figure out your problem.

[billgatos]

I have now to figure how am i going to accpet winhttp request in the eset firewall.....
best regards.