ERROR ExtHandler Exception processing goal state, giving up: ['-----BEGIN PUBLIC KEY-----<key>-----END PUBLIC KEY-----\n']

[bobsun0917]

ISSUE
Image: Ubuntu 16.04 LTS
Waagent version: 2.2.32 | 2.2.40

waagent.log is filled with following messages,

INFO ExtHandler WireServer is not responding. Reset endpoint
INFO ExtHandler Protocol endpoint not found: WireProtocol, [ProtocolError] Exceeded max retry updating goal state
INFO ExtHandler Protocol endpoint not found: MetadataProtocol, [ProtocolError] 404 - GET: http://169.254.169.254/Microsoft.Compute/identity?api-version=2015-05-01-preview
INFO ExtHandler Retry detect protocols: retry=45
INFO ExtHandler WireServer endpoint is not found. Rerun dhcp handler
INFO ExtHandler Test for route to 168.63.129.16
INFO ExtHandler Route to 168.63.129.16 exists
INFO ExtHandler Wire server endpoint:168.63.129.16
INFO ExtHandler Fabric preferred wire protocol version:2015-04-05
INFO ExtHandler Wire protocol version:2012-11-30
INFO ExtHandler Server preferred version:2015-04-05
ERROR ExtHandler Exception processing goal state, giving up: ['-----BEGIN PUBLIC KEY----------END PUBLIC KEY-----\n']

TROUBLESHOOTING

1. The issue persists in version 2.2.32 and 2.2.40
2. Removing walinuxagent and install again but error remains.
3. paping port 80 on 168.63.129.16 and 169.254.169.254 can succeed

[johncrim]

Initially I thought I was seeing the same issue, but after investigation it appears distinct, so I created a new issue: #1550

[pgombar]

Hi @bobsun0917, please make sure only one openssl library is installed on the system. To confirm if this is causing the issue, try this command:
/usr/bin/openssl x509 -in /var/lib/waagent/{thumbprint}.crt -fingerprint -noout

If you see something like this in the output of the command, it means there is more than one reference to openssl and they are conflicting:

/usr/bin/openssl: /usr/local/openssl/lib/libssl.so.1.0.0: no version information available (required by /usr/bin/openssl)
/usr/bin/openssl: /usr/local/openssl/lib/libcrypto.so.1.0.0: no version information available (required by /usr/bin/openssl)

[pgombar]

Feel free to re-open if the issue persists after the proposed fix.