DataStax Support Forums » User Favorites: btarbox

DataStax Support Forums » User Favorites: btarbox btarbox Software, Support, and Training for Apache Cassandra en-US Fri, 24 May 2013 07:27:09 +0000 http://bbpress.org/?v=1.0.3 <![CDATA[Search]]> q http://www.datastax.com/support-forums/search.php Btarbox on "After reinstalling Opscenter the agents can not connect, security error" http://www.datastax.com/support-forums/topic/after-reinstalling-opscenter-the-agents-can-not-connect-security-error#post-8166 Thu, 27 Dec 2012 20:26:10 +0000 Btarbox 8166@http://www.datastax.com/support-forums/ Re-installing didn't seem to have any effect but disabling ssl worked like a champ! Thanks! nickmbailey on "After reinstalling Opscenter the agents can not connect, security error" http://www.datastax.com/support-forums/topic/after-reinstalling-opscenter-the-agents-can-not-connect-security-error#post-8164 Thu, 27 Dec 2012 18:14:55 +0000 nickmbailey 8164@http://www.datastax.com/support-forums/ OpsCenter and the agents communicate with SSL. When you reinstalled OpsCenter it generated new SSL certificates that the agents do not have. Re-installing the agents should resolve the issue. Alternatively you can disable SSL: <a href="http://www.datastax.com/docs/opscenter/configure/configure_ssl" rel="nofollow">http://www.datastax.com/docs/opscenter/configure/configure_ssl</a> Btarbox on "After reinstalling Opscenter the agents can not connect, security error" http://www.datastax.com/support-forums/topic/after-reinstalling-opscenter-the-agents-can-not-connect-security-error#post-8159 Thu, 27 Dec 2012 16:51:29 +0000 Btarbox 8159@http://www.datastax.com/support-forums/ I had to reinstall opscenter (for reasons unrelated to opscenter) and now none of the agents except the one where opscenter is running can connect. I get the following error: INFO [main] 2012-12-27 11:41:05,015 Loading conf files: ./conf/address.yaml INFO [main] 2012-12-27 11:41:05,051 Java vendor/version: Java HotSpot(TM) 64-Bit Server VM/1.6.0_37 INFO [main] 2012-12-27 11:41:05,051 Waiting for the config from OpsCenter INFO [main] 2012-12-27 11:41:05,052 SSL communication is enabled INFO [main] 2012-12-27 11:41:05,052 Creating stomp connection to worker1:61620 INFO [StompConnection receiver] 2012-12-27 11:41:05,057 Reconnecting in 0s. INFO [main] 2012-12-27 11:41:05,058 Attempting to determine Cassandra's broadcast address through JMX INFO [Initialization] 2012-12-27 11:41:05,098 Sleeping for 2s before trying to determine IP over JMX again WARN [pool-2-thread-1] 2012-12-27 11:41:05,120 Tried to send message while not connected: /conf-request [null,["2.10","\/774604463\/conf",["172.16.10.201","fe80:0:0:0:92b1:1cff:fe5d:f4fb%2","0:0:0:0:0:0:0:1%1","127.0.0.1","127.0.1.1"]]] ERROR [StompConnection receiver] 2012-12-27 11:41:05,288 failed to send connect message: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1764) at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:241) at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:235) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1206) at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:136) at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593) at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:958) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1203) at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:654) at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:100) at java.io.DataOutputStream.write(DataOutputStream.java:90) at java.io.FilterOutputStream.write(FilterOutputStream.java:80) at org.jgroups.client.StompConnection.sendConnect(StompConnection.java:125) at org.jgroups.client.StompConnection.connect(StompConnection.java:334) at org.jgroups.client.StompConnection.run(StompConnection.java:241) at java.lang.Thread.run(Thread.java:662) Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:289) at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:263) at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:184) at sun.security.validator.Validator.validate(Validator.java:218) at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126) at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209) at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249) at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1185) ... 13 more Caused by: java.security.cert.CertPathValidatorException: signature check failed at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:139) at sun.security.provider.certpath.PKIXCertPathValidator.doValidate(PKIXCertPathValidator.java:330) at sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:178) at java.security.cert.CertPathValidator.validate(CertPathValidator.java:250) at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:275) ... 20 more Caused by: java.security.SignatureException: Signature does not match. at sun.security.x509.X509CertImpl.verify(X509CertImpl.java:444) at sun.security.provider.certpath.BasicChecker.verifySignature(BasicChecker.java:133) at sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:112) at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:117) ... 24 more INFO [StompConnection receiver] 2012-12-27 11:41:05,290 Connected to worker1:61620 ERROR [StompConnection receiver] 2012-12-27 11:41:05,291 failed subscribing to /774604463/conf: javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed I've tried removing and reinstalling the agents (I'm on ubuntu so that just means un-TARing the file and running bin/setup <opscenter-addr> on it. I'm sure this is something simple I'm doing wrong but its currently got me stuck. Thanks.