RE: cimcli command error when openssl is enabled

Hi Veeresh,
    We are using cimcli with ssl enabled cimserver successfully.
Assuming you are using ssl-enabled cimcli ( built with ssl-enabled
cimserver )
Please crosscheck these points:
 
1. check with:
 
    cimcli ei -n root/pg_interop cim_computersystem -l  <ip>:5989 -u
administrator -p xxx  -s
 
     your first command is missing "-s" option.
 
2. what is the value of sslClientVerificationMode. If it is "disabled",
that means cimom will not validate client through certificates. It will
validate through user/passowrd authentication. you can check
pegasus\doc\PegasusSSLGuidelines.htm for details.
 
3.  keeping enableAuthentication=true, is following command working?
     
cimcli ei -n root/pg_interop cim_computersystem -l  <ip>:5988 -u
administrator -p xxx 
 
if it gives error, that means there is a problem with authentication,
not ssl feature.ssl depends on selected authentication and in this case,
even http connection is also failing.
 
Hope one of these will help you.
 
Thanks,
Souvik
 

________________________________

From: Yaligar, Veeresh S (USD SRDL) [mailto:[email protected]] 
Sent: Sunday, July 31, 2011 9:22 PM
To: [email protected]
Subject: cimcli command error when openssl is enabled



Hi 

 I followed all the steps to enable openssl in cimserver on Windows 2008
machine. Created key and certificate as per documentation and also set
the cimserver variables as below

httpsPort=5989

enableHttpsConnection=true

enableAuthentication=true

traceComponents=All

traceLevel=4

sslCertificateFilePath=myserver.cert

sslKeyFilePath=myserver.key

 

Generated a self signed certificate and added it to trust store using
cimturst , cimauth and cimuser commands.

when I connect to cimom from the same machine I get following errors.

>cimcli ei -n root/pg_interop cim_computersystem -l  <ip>:5989 -u
administrator -p xxx 

cimcli Pegasus Exception: Connection closed by CIM Server.. Cmd = ei
Object = cim_computersystem

 

>cimcli ei -n root/pg_interop cim_computersystem -l ip:5989 -u
administrator -p xxxxx  -s --cert myserver.cert --key myserver.key

cimcli Pegasus Exception: HTTP Error (401 Unauthorized).. Cmd = ei
Object = cim_computersystem

 

 

 

The  cimom trace show as below.

 

1312107386s-20595us: SSL [4828:18446744073709551614:TLS.cpp:159]: --->
SSL: Created SSL socket

1312107386s-20595us: DiscardedData
[4828:18446744073709551614:TLS.cpp:371]: ---> SSL: Not accepted 1
error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request client
IP address : 15.146.152.2

1312107386s-20595us: DiscardedData
[4828:18446744073709551614:HTTPAcceptor.cpp:880]: HTTPAcceptor:
SSL_accept() failed

1312107386s-36220us: SSL [4828:18446744073709551614:TLS.cpp:172]: --->
SSL: Deleted SSL socket

 

cimcli works fine when queried on http port

>cimcli ei -n root/pg_interop cim_computersystem

 

Success.

 

 

Appreciate your help on troubleshooting the problem.

 

 

Thanks

Veeresh

 

 

 

 


Please do not print this email unless it is absolutely necessary. 

The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. 

www.wipro.com