Absent Member.. shashidv Absent Member..
Absent Member..
741 views

Error integrating BSMC with OMi

Jump to solution

Hi,

 

Trying to integrate BSMC with OMi to receive the NNMi events. But the BSMC is not getting added. Even though all 3 servers GW,DPS and BSMC have proper Certificates installed i still see some ssl errors on BSMC and opr-webapp.log.

 

, I see below error on the BSMC server’s System.txt,

 

0: INF: Wed Apr 23 14:08:31 2014: ovcd (4112/6248): (sec.cm.client-43) Successfully installed certificate for alias '73d9a572-5d98-755d-0b2f-a489704cad95'.

0: WRN: Wed Apr 23 14:09:19 2014: ovbbccb (3808/7220): (bbc-90) The incoming HTTPS client connection from host 134.187.145.164 failed due to the SSL error:

1: WRN: Wed Apr 23 14:09:19 2014: ovbbccb (3808/7220): (sec.core-114) SSL connection error (sslv3 alert certificate unknown).

0: WRN: Wed Apr 23 14:09:35 2014: ovbbccb (3808/1512): (bbc-90) The incoming HTTPS client connection from host 134.187.145.164 failed due to the SSL error:

1: WRN: Wed Apr 23 14:09:35 2014: ovbbccb (3808/1512): (sec.core-114) SSL connection error (sslv3 alert certificate unknown).

 

I also get similar error in opr-webapp.log file when I try to manually add the BSMC to connected server list from the UI and click the test .

 

014-04-23 13:53:02,755 [ajp-0.0.0.0-8009-12] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found 

2014-04-23 13:53:57,373 [ajp-0.0.0.0-8009-9] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found 

2014-04-23 13:55:27,650 [ajp-0.0.0.0-8009-8] INFO  BsmEnvironment.getLocalHostInfo(110) - BAC virtual hostname: 'lsdrca92.lnx.int.ca.gov'. 

2014-04-23 13:55:30,140 [ajp-0.0.0.0-8009-8] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found 

2014-04-23 13:58:19,800 [ajp-0.0.0.0-8009-7] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found 

2014-04-23 13:59:44,729 [ajp-0.0.0.0-8009-4] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found 

2014-04-23 14:09:17,362 [ajp-0.0.0.0-8009-1] INFO  BsmEnvironment.getLocalHostInfo(110) - BAC virtual hostname: 'lsdrca92.lnx.int.ca.gov'. 

2014-04-23 14:09:18,759 [ajp-0.0.0.0-8009-1] INFO  BsmEnvironment.getLocalHostInfo(110) - BAC virtual hostname: 'lsdrca92.lnx.int.ca.gov'. 

2014-04-23 14:09:19,699 [ajp-0.0.0.0-8009-13] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found 

2014-04-23 14:09:35,631 [ajp-0.0.0.0-8009-10] WARN  PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found

 

On the BSMC I get the below,

 

C:\Users\hpomadmin>bbcutil -ping https://lsdrca92.lnx.int.ca.gov/com.hp.ov.opc.msgr

 

https://lsdrca92.lnx.int.ca.gov/com.hp.ov.opc.msgr:

          (bbc-289) status=eServiceUnknown time=797 ms

 

How to fix this ?

 

Regards,

Shashi

Tags (1)
0 Likes
1 Solution

Accepted Solutions
Absent Member.. KBerger Absent Member..
Absent Member..

Re: Error integrating BSMC with OMi

Jump to solution

I did a HP Vroom  with Sashi and we figured out the issue.  The ovrg on the GW was missing the _2048 trusted cert.  It hasd ther 1024 but not the 2048. Interestingly the local section of the ovcert list did have both the 1024 and 2048 trusted certs. Once we out it back, everything was working as expected.

HP Support

If you find that this or any post resolves you issue, please be sure to mark it as an accepted solution.
0 Likes
6 Replies
Micro Focus Expert
Micro Focus Expert

Re: Error integrating BSMC with OMi

Jump to solution
ERROR: 2014-04-24 12:52:58,818 [ajp-0.0.0.0-8009-5] WARN PingService.invoke0(?) - bbc ping results in an exception: No trusted certificate found


Please run ovcert –check

C:\Users\Administrator>ovcert -check

OvCoreId set : OK
Private key installed : OK
Certificate installed : OK
Certificate valid : OK
Trusted certificates installed : OK
Trusted certificates valid : OK

Based on that we can suggest a solution
0 Likes
Absent Member.. shashidv Absent Member..
Absent Member..

Re: Error integrating BSMC with OMi

Jump to solution
Hi Remzi,

From all the 3 nodes the ovcert -check comes back good.

[svijayaka@lsdrca92 EJB]$ sudo /opt/OV/bin/ovcert -check
[sudo] password for svijayaka:

OvCoreId set : OK
Private key installed : OK
Certificate installed : OK
Certificate valid : OK
Trusted certificates installed : OK
Trusted certificates valid : OK


[svijayaka@lsdrca93 ~]$ sudo /opt/OV/bin/ovcert -check
[sudo] password for svijayaka:

OvCoreId set : OK
Private key installed : OK
Certificate installed : OK
Certificate valid : OK
Trusted certificates installed : OK
Trusted certificates valid : OK

Check succeeded.

C:\Users\hpomadmin>ovcert -check

OvCoreId set : OK
Private key installed : OK
Certificate installed : OK
Certificate valid : OK
Trusted certificates installed : OK
Trusted certificates valid : OK

Check succeeded.
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Error integrating BSMC with OMi

Jump to solution
great thanks now we can focus on certificates itself can you also get list of certificates please ovcert -list

we will have couple of option to fix it.
0 Likes
Absent Member.. shashidv Absent Member..
Absent Member..

Re: Error integrating BSMC with OMi

Jump to solution

Hi Remzi,

 

Attached Agent-details.txt has all the output from GW,DPS and BSMC.

 

Regards,

Shashi

0 Likes
Absent Member.. KBerger Absent Member..
Absent Member..

Re: Error integrating BSMC with OMi

Jump to solution

I did a HP Vroom  with Sashi and we figured out the issue.  The ovrg on the GW was missing the _2048 trusted cert.  It hasd ther 1024 but not the 2048. Interestingly the local section of the ovcert list did have both the 1024 and 2048 trusted certs. Once we out it back, everything was working as expected.

HP Support

If you find that this or any post resolves you issue, please be sure to mark it as an accepted solution.
0 Likes
Absent Member.. shashidv Absent Member..
Absent Member..

Re: Error integrating BSMC with OMi

Jump to solution
Thank you Keith for helping to get this fixed. As always Awesome support.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.