This post is more than 5 years old

1 Message

206010

September 1st, 2015 14:00

vfoglight 7.0 unable to connect to vcenter after disabling sslv3

Is there a patch for vfoglight 7 that allows for TLS connectivity to vcenter?

After disabling SSLv3 in vcenter, foglight is unable to connect. 

ERROR [Quartz[0]-90] com.quest.agent.esx.task.RelationsTask - Error during execution: ERROR: VI SDK invoke exception:javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

java.rmi.RemoteException: VI SDK invoke exception:javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

                at com.vmware.vim25.ws.WSClient.invoke(WSClient.java:183)

                at com.vmware.vim25.ws.WSClient.invoke(WSClient.java:125)

                at com.vmware.vim25.ws.VimStub.retrieveServiceContent(VimStub.java:1409)

                at com.vmware.vim25.mo.ServiceInstance. (ServiceInstance.java:85)

                at com.vmware.vim25.mo.ServiceInstance. (ServiceInstance.java:69)

                at com.quest.vmware.api.connection.VIService.connect(VIService.java:60)

                at com.quest.vmware.api.connection.VIService.login(VIService.java:82)

                at com.quest.agent.esx.task.ESXAgentTask.connect(ESXAgentTask.java:178)

                at com.quest.agent.esx.task.ESXAgentTask.run(ESXAgentTask.java:116)

                at com.quest.agent.esx.ESXAgent.runTask(ESXAgent.java:407)

                at com.quest.agent.esx.ESXAgent.esxRelationsCollection(ESXAgent.java:469)

                at sun.reflect.GeneratedMethodAccessor42.invoke(Unknown Source)

                at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

                at java.lang.reflect.Method.invoke(Method.java:597)

                at com.quest.glue.core.services.EquivalenceInvocationHandler.invoke(EquivalenceInvocationHandler.java:70)

                at com.quest.glue.core.agent.AgentInteractionHandler.invoke(AgentInteractionHandler.java:186)

                at com.sun.proxy.$Proxy55.esxRelationsCollection(Unknown Source)

                at sun.reflect.GeneratedMethodAccessor42.invoke(Unknown Source)

                at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

                at java.lang.reflect.Method.invoke(Method.java:597)

                at com.quest.glue.core.agent.scheduler.CollectorCallback.invokeCollector(CollectorCallback.java:162)

                at com.quest.glue.core.agent.scheduler.CollectorCallback.execute(CollectorCallback.java:130)

                at com.quest.glue.core.scheduler.quartz.QuartzScheduler$ScheduledTaskSequentialJob.execute(QuartzScheduler.java:716)

                at org.quartz.core.JobRunShell.run(JobRunShell.java:202)

                at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895)

                at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918)

                at java.lang.Thread.run(Thread.java:662)

 

2015-09-01 15:25:31.798 ECHO    FATAL [Quartz[0]-90] com.quest.agent.esx.task.RelationsTask - The agent was unable to establish a secure SSL connection to the VirtualCenter.  Please review your agent configuration to ensure proper connection information has been entered.

2015-09-01 15:25:31.798 ECHO    

Thanks

September 2nd, 2015 11:00

Hi JLAPRADE,

I read a similar case, looks like issue could be solved either:

1) Enabling SSLv2Hello at vCenter, or

2) Upgrading to latest Foglight/Agent managers to the latest release.

Regarding option #1:

Customer modified vpxd.cfg configuration file in vCenter . This is the line that needs to be modified:

tlsv1

To add the SSLv2Hello protocol, the customer added it after a comma:

tlsv1,SSLv2Hello

This solved the issue for that customer, but you might want to check with VMware.

If issues persist after trying those solutions or if you have problems implementing them, please open a Service Request (SR) with Support and mention this thread.

This is where a SR can be created: support.software.dell.com/create-service-request

Regards

Gaston.

No Events found!

Top