SLL Error

Hi 2 everyone, i  try to connect  OMi and BSM, but when check connections -  i have  SSL error. 

From DPS

bin>ovbbccb -ping https://mon-omi

https://mon-omi: status=eServiceOK
                             coreID=5b075602-510e-7585-1477-92c6dfa736bb
                             bbcV=12.01.003 appN=ovbbccb appV=12.01.003 conn=5
From GW 

bin>ovbbccb -ping http://mon-omi

http://mon-omi: status=eServiceOK
                            coreID=5b075602-510e-7585-1477-92c6dfa736bb
                            bbcV=12.01.003 appN=ovbbccb appV=12.01.003 conn=5                    

From OMI 

c:\HPBSM\opr\support>ovbbccb -ping https://mon-gatesrv

https://mon-gatesrv
          status=eServiceOK coreID=43e42dc2-ac9c-7561-0a34-c48dac981c33
          bbcV=11.14.014 appN=ovbbccb appV=11.14.014 conn=2 time=226 ms


c:\HPBSM\opr\support>ovbbccb -ping https://mon-dataproc
https://mon-dataproc
          status=eServiceOK coreID=28dcb072-aca5-7561-01f0-d74c29c87b74
          bbcV=11.14.014 appN=ovbbccb appV=11.14.014 conn=2 time=289 ms

 

Error-  

Ping failed due to the following error: Could not establish a valid SSL connection with the server 'mon-gatesrv'. Please verify the SSL certificate configured for the Connected Server with this DNS name, or contact your administrator.

 

How to send events from OMI to BSM ?!  Help!

Parents
  • Add: 

    in opr-gateway.log 

    2016-01-14 13:10:38,660 [EventSyncThread:mon-gatesrv:mon-omi_98] ERROR EventSenderUtil.createCall(242) - Certificate not trusted Certificate [2]: ObjectId: 2.5.29.35 Criticality=false
    AuthorityKeyIdentifier [ KeyIdentifier [ 0000: 3D 59 AB E2 5D 6E D1 63   89 0E E6 AB B9 B2 48 63  =Y..]n.c......Hc
    0010: D7 D5 D8 4C  ...L ]
    [OU=OpenView, O=Hewlett-Packard, L=MON-DATAPROCCN=CA_3417b3b2-acdf-7561-0db1-fca9eddd834f]
    SerialNumber: [    00] ]
     [3]: ObjectId: 2.5.29.19 Criticality=false BasicConstraints:[   CA:false   PathLen: undefined]
    [4]: ObjectId: 2.5.29.15 Criticality=false
    KeyUsage [
      DigitalSignature
      Non_repudiation
      Key_Encipherment
    ]
    [5]: ObjectId: 2.5.29.14 Criticality=false
    SubjectKeyIdentifier [
    KeyIdentifier [
    0000: F6 09 0A 43 33 29 A9 6C   A2 80 D1 24 C0 0F 59 CD  ...C3).l...$..Y.
    0010: 8F AB 84 54                                        ...T
    ]
    ]

    ]
      Algorithm: [SHA1withRSA]
      Signature:
    0000: 09 BE 14 71 34 0C 40 5F   02 00 AD 37 F2 72 38 C1  ...q4.@_...7.r8.

  • Hi,

    Is this APM 9.25/9.26 to OMi 10 integration or you create a connected server for older versions of the products? Did you try to restart the products? Where do you see this error? Do you mean how to send a dummy event or something else?

    By the way the bbcutil test should be in the format:

    bbcutil –ping -ovrg server https://<FQDN> 

    BR,

    Rosen

  •  Hello.

    Hp recommend to update omw to omi10  (Operations bridge evolution giude)

    So i have  HP BSM (APM 9.25) NNmi 9 omw 9

    Now i need to change my omw9 to OMi10.

    So i install OMi 10, migrate agents from OMw 9  to  OMi 10.

    And now i need to forward messages from om agents  (omi10) to my central console BSM (apm9.25).

    But when i try to add  BSM  at omi10 connected servers i have SSL error.

    Same error in OMi  opr-gateway.log  file C:\HPBSM\log\wde\


    C:\Windows\System32>bbcutil -ping  https://mon-gatesrv.domain.org

    https://mon-gatesrv.domain.org:
              status=eServiceOK coreID=43e42dc2-ac9c-7561-0a34-c48dac981c33
              bbcV=11.14.014 appN=ovbbccb appV=11.14.014 conn=2 time=464 ms

    BBcutils show same OK status.

  • Hi,

    So this is APM 9.25 to OMi 10 integration. In general OMi should be the central console and the design is to forward the APM event to OMi. If you want the other direction from OMi to APM you need to create additional forwarding rule in OMi for the APM.

    As I suggested did you try to restart the products?

    I also pointed that the bbcutil test should be in the format:

    bbcutil –ping -ovrg server https://<FQDN>

    You are running it without the –ovrg option which is not correct.

    I would suggest to run ovcert-list on all BSM and OMi servers and list it so we can check is it looking fine or not.

     

    BR,

    Rosen

  • From Omi and BSM same situation :

    C:\Windows\System32>bbcutil -ping -ovrg server https://mon-gatesrv.domain.org

    C:\Windows\System32>

    No information, just end, even if i try to  save in file  > c:\output.txt  - just empty file.

    C:\Windows\System32>bbcutil -ping -ovrg https://mon-gatesrv.domain.org

    C:\Windows\System32>

     

    OMI ovcert

    :\Windows\System32>ovcert -list
    ---------------------------------------------------------
     Keystore Content                             |
    ---------------------------------------------------------
    Certificates:                                               |
         22675202-604f-7585-0d88-e2dee886a05f (*)            |
         5b075602-510e-7585-1477-92c6dfa736bb (*)            |
         5dc9d6bd-653b-4d8a-ab44-0f30bab0660b (*)            |
    ---------------------------------------------------------
     Trusted Certificates:                                 |
         CA_187e5082-c773-7569-1f35-b16c1fad05f6             |
         CA_3417b3b2-acdf-7561-0db1-fca9eddd834f             |
         CA_3417b3b2-acdf-7561-0db1-fca9eddd834f_2048        |
         CA_5dc9d6bd-653b-4d8a-ab44-0f30bab0660b_2048        |
    ---------------------------------------------------------

    ---------------------------------------------------------
    Keystore Content (OVRG: server)              |
    ---------------------------------------------------------
     Certificates:                                          |
         5dc9d6bd-653b-4d8a-ab44-0f30bab0660b (*)            |
    ---------------------------------------------------------
     Trusted Certificates:                                |
         CA_5dc9d6bd-653b-4d8a-ab44-0f30bab0660b_2048 (*)    |
    ---------------------------------------------------------

     

    BSM Ovcert

    ---------------------------------------------------------
    | Keystore Content                            |
    ---------------------------------------------------------
    | Certificates:                                                   |
    |     28dcb072-aca5-7561-01f0-d74c29c87b74 (*)            |
    ---------------------------------------------------------
    | Trusted Certificates:                               |
    |     CA_187e5082-c773-7569-1f35-b16c1fad05f6             |
    |     CA_3417b3b2-acdf-7561-0db1-fca9eddd834f             |
    |     CA_3417b3b2-acdf-7561-0db1-fca9eddd834f_2048        |
    |     CA_5dc9d6bd-653b-4d8a-ab44-0f30bab0660b_2048        |
    ---------------------------------------------------------

    ---------------------------------------------------------
    | Keystore Content   (OVRG: server)              |
    ---------------------------------------------------------
    | Certificates:         :                                            |
    |     3417b3b2-acdf-7561-0db1-fca9eddd834f (*)            |
    ---------------------------------------------------------
    | Trusted Certificates:                               |
    |     CA_187e5082-c773-7569-1f35-b16c1fad05f6             |
    |     CA_3417b3b2-acdf-7561-0db1-fca9eddd834f (*)         |
    |     CA_3417b3b2-acdf-7561-0db1-fca9eddd834f_2048 (*)    |
    |     CA_5dc9d6bd-653b-4d8a-ab44-0f30bab0660b_2048        |

     

    Omi  ovcoreID  5b075602-510e-7585-1477-92c6dfa736bb

    BSM ovcoreID 28dcb072-aca5-7561-01f0-d74c29c87b74

     

     

  • UPDATE !!!    I  try to connect  OMI  with BSM 9.26  and  no  problem, all works!!! 

    Something wrong with omi10 and 9.25  but  what?! 

Reply Children