Re: HTTPS Monitor reports fail outage on some hosts after upgrade to 21.1.0
Oleg Cherkasov <[email protected]>
| Newsgroups | gmane.network.opennms.general |
|---|---|
| Message-ID | <[email protected]> |
On 03. mai 2018 15:33, Oleg Cherkasov wrote: > Hi, > > I have upgraded to 21.1.0 yesterday, it went smooth however after > restart HTTPS Monitor started to report false outage on some hosts. I > may see those hosts have untrusted certificates installed, iLO / iDRAC > devices on servers and one USB dongle server device with HTTP/HTTPS > console. > > I have tried to increase timeout however it does not help to solve the > issue. Rescanning and removing and adding hosts do not help. > > It seems the release related issue indeed because previous 21.0.4/5 did > work just fine using the same configuration for poller-configuration.xml > > Shall I file a bug report or it is a well known issue? I have fixed the issue, so it makes sense to answer my own question. The problem with HTTPS was down to JDK 1.8u171 security settings for TLS. Commenting out jdk.tls.disabledAlgorithms and jdk.tls.disabledAlgorithms, following opennms service restart solves the problem with HTTPS. In my case on CentOS7 I had to edit /usr/java/jdk1.8.0_171-amd64/jre/lib/security/java.security file from Oracle JDK 1.8. Older devices do have SSLv3 or earlier and bogus certificates, so it makes sense to disable those security restrictions in case of legacy devices sitting in local net. Cheers, Oleg ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Please read the OpenNMS Mailing List FAQ: http://www.opennms.org/index.php/Mailing_List_FAQ opennms-discuss mailing list To *unsubscribe* or change your subscription options, see the bottom of this page: https://lists.sourceforge.net/lists/listinfo/opennms-discuss