Re: Console Proxy SSL

[Chip Childers <ch...@sungard.com>]

On Fri, Jun 21, 2013 at 09:49:42AM -0400, Billy Ramsay wrote:
> Thanks for catching that!
> 
> Is there anyway to get around the API call for this? During my research on
> this issue, I found a few references to folks who had inserted the certs
> directly into the database, bypassing the API when they could not get it to
> work. Is this feasible? I was hoping to use 4.1.0 for an impending
> deployment next week, and this is the last roadblock.
> 
> Thanks again!
> 
> -WPR

It's feasible, but not particularly easy to get the formatting right.  I
suggest playing with it a bit, and before you do so...  check the
formatting of the rows in the table before you change them.

> 
> -----Original Message-----
> From: Pranav Saxena [mailto:pranav.saxena@citrix.com] 
> Sent: Friday, June 21, 2013 9:41 AM
> To: users@cloudstack.apache.org
> Subject: RE: Console Proxy SSL
> 
> You are getting a NPE in your management server logs -
> /***************************************************************************
> ********************
> 
> Unexpected exception while executing
> org.apache.cloudstack.api.command.admin.resource.UploadCustomCertificateCmd
> java.lang.NullPointerException
> at
> com.cloud.server.ManagementServerImpl.uploadCertificate(ManagementServerImpl
> .java:2818)
> 
> ****************************************************************************
> ********************/
> 
> Perhaps you should raise a bug in this case. 
> 
> Thanks,
> Pranav
> 
> -----Original Message-----
> From: Billy Ramsay [mailto:bramsay@dynamicquest.com]
> Sent: Friday, June 21, 2013 7:07 PM
> To: users@cloudstack.apache.org
> Subject: RE: Console Proxy SSL
> 
> >> Greetings,
> >> 
> >> We just completed a clean install of 4.1.0. I was able to 
> >> successfully upload a custom certificate for use by the console proxy 
> >> machines in our old
> >> 4.0.1 environment, but now I cannot get it to work for the life of me 
> >> in 4.1.0.
> >> 
> >> The UI just says "failed to update", as usual. I also tried to upload 
> >> via API, and the error I get is below:
> >> 
> >> errorcode = 530
> >> errortext = Command failed due to Internal Server Error
> >> 
> >> I have confirmed that the certificate and key are in the proper 
> >> format, as was used in our 4.0.1 environment.
> >> 
> >> Thanks in advance for any light you can shed on this!
> >> 
> >> -WPR
> >> 
> >> 
> >> 
> >
> >What do you see in the management server logs and / or API logs during 
> >the
> upload process?
> 
> Absolutely nothing in either when I do it from the UI. I did a tail -f on
> one monitor while I tried to upload via the UI on another.
> 
> When I do it from cloudmonkey I get the output at the bottom (sanitized,
> including cert).
> 
> Thanks for looking into this!
> 
> 
> API log:
> 
> 2013-06-21 09:22:27,560 INFO  [cloud.api.ApiServer] (catalina-exec-21:null)
> (userId=2 accountId=2 sessionId=null) 74.122.165.7 -- GET
> apiKey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&certifi
> cate=-----BEGIN+CERTIFICATE-----%5CnMIIC5zCCAlACAQEwDQYJKoZIhvcNAQEFBQAwgbsx
> JDAiBgNVBAcTG1ZhbGlDZXJ0%5CnIFZhbGlkYXRpb24gTmV0d29yazEXMBUGA1UEChMOVmFsaUNl
> cnQsIEluYy4xNTAz%5CnBgNVBAsTLFZhbGlDZXJ0IENsYXNzIDIgUG9saWN5IFZhbGlkYXRpb24g
> QXV0aG9y%5CnaXR5MSxxxxxxxxxxxxxxxxxxxxvd3d3LnZhbGljZXJ0LmNvbS8xIDAeBgkqhkiG%
> 5Cn9w0BCQEWEWlusrtjrjrsthjsrthrthrth4XDTk5MDYyNjAwMTk1NFoXDTE5MDYy%5CnNjAwMT
> k1NFowgbsxJDAiBgNVBAcTG1ZhbGlDZXJ0IFZhbGlkYXRpb24gTmV0d29y%5CnazEXMBUGA1UECh
> MOVmFsaUNlcnQsIEluYy4xNTAzBgNVBAsTLFZhbGlDZXJ0IENs%5CnYXNzIDIgUG9sarjrtjhrst
> hrsthsrtjhrsthaXR5MSEwHwYDVQQDExhodHRw%5CnOi8vd3d3LnZhbGljZXJ0LmNvbS8xIDAeBg
> kqhkiG9w0BCQEWEWluZm9AdmFsaWNl%5CncnQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQ
> KBgQDOOnHK5avIWZJV16vY%5CndA757tn2VUdZZUsrthsrthsrthsrthsrthsthUGJ7SVCCSRrCl
> 6zfN1SLUzm1NZ9%5CnWlmpZdRJEy0kTRxQb7XBhVQ7%2FnHk01xC%2BYDgkRoKWzk2Z%2FM%2FVX
> wbP7RfZHM047QS%5Cnv4dk%2BNoS%2FzcnwbNDu%2B97bi5p9wIDAQABMA0GCSqGSIb3DQEBBQUA
> A4GBADt%2FUG9v%5CnUJSZSWI4OB9L%2BKXIPqeCgfYrx%2BjFzug6EILLGACOTb2oWH%2BheQC1
> u%2BmNr0HZDzTu%5CnIYEZoDJJKPTEjlbVUjP9UNV%2BmWwD5MlM%2FMtsq2azSiGM5bUMMj4Qss
> xsodyamEwC%5CnW%2FPOuZ6lcg5Ktz885hZo%2BL7tdEy8W9ViH0Pd%5Cn-----END+CERTIFICA
> TE-----&command=uploadCustomCertificate&domainsuffix=domain.com&id=1&name=ro
> ot&response=json&signature=CTlxxxxxx0YM%2FwfxxxxxPTR%2Fxx0%3D 200 {
> "uploadcustomcertificateresponse" :
> {"jobid":"5c293efd-dd23-4766-8e96-4a03e6a5f29e"} }
> 2013-06-21 09:22:29,613 INFO  [cloud.api.ApiServer] (catalina-exec-19:null)
> (userId=2 accountId=2 sessionId=null) 74.122.165.7 -- GET
> apiKey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&command=quer
> yAsyncJobResult&jobid=5c293efd-dd23-4766-8e96-4a03e6a5f29e&response=json&sig
> nature=YcxxxxxxxxxqT%2BmxxxxxxtqjMDyww%3D 200 {
> "queryasyncjobresultresponse" :
> {"accountid":"92562526-d9a9-11e2-a93b-b6bd483074cc","userid":"9256e632-d9a9-
> 11e2-a93b-b6bd483074cc","cmd":"org.apache.cloudstack.api.command.admin.resou
> rce.UploadCustomCertificateCmd","jobstatus":2,"jobprocstatus":0,"jobresultco
> de":530,"jobresulttype":"object","jobresult":{"errorcode":530,"errortext":"C
> ommand failed due to Internal Server
> Error"},"created":"2013-06-21T09:22:27-0400","jobid":"5c293efd-dd23-4766-8e9
> 6-4a03e6a5f29e"} }
> 
> Mgmt log:
> 
> 2013-06-21 09:30:07,423 DEBUG [cloud.api.ApiServlet] (catalina-exec-20:null)
> ===START===  74.122.165.7 -- GET
> apiKey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> xxxx&certificate=-----BEGIN+CERTIFICATE-----%5CnMIIC5zCCAlACAQEwDQYJKoZIhvcN
> AQEFBQAwgbsxJDAiBgNVBAcTG1ZhbGlDZXJ0%5CnIFZhbGlkYXRpb24gTmV0d29yazEXMBUGA1UE
> ChMOVmFsaUNlcnQsIEluYy4xNTAz%5CnBgNVBAsTLFZhbGlDZXJ0IENsYXNzIDIgUG9saWN5IFZh
> bGlkYXRpb24gQXV0aG9y%5CnaXR5MSEwHwYDVQQDExhodHRwOi8vd3d3LnZhbGljZXJ0LmNvbS8x
> IDAeBgkqhkiG%5Cn9w0BCQEWEWluZmxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> xx5MDYy%5CnNjAwMTk1NFowgbsxJDAiBgNVBAcTG1ZhbGlDZXJ0IFZhbGlkYXRpb24gTmV0d29y%
> 5CnazEXMBUxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxTLFZhbGlDZXJ0IENs%
> 5CnYXNzIDIgUG9saWN5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxYDVQQDExho
> dHRw%5CnOi8vd3d3LnZhbGljZXJ0LmNvbS8xIDAeBgkqhkiG9w0BCQEWEWluZm9AdmFsaWNl%5Cn
> cnQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDOOnHK5avIWZJV16vY%5CndA757tn2
> VUethETHehehAEHa5e6qw4uWU5koe6WQTVCCSRrCl6zfN1SLUzm1NZ9%5CnWlmpZdRJEy0kTRxQb
> 7XBhVQ7%2FnHk01xC%2BYDgkRoKWzk2Z%2FM%2FVXwbP7RfZHM047QS%5Cnv4dk%2BNoS%2Fzcnw
> bNDu%2B97bi5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxGBADt%2FUG9v%5CnUJSZSWI4
> OB9L%2BKXIPqeCgfYrx%2BjFzug6EILLGACOTb2oWH%2BheQC1u%2BmNr0HZDzTu%5CnIYEZoDJJ
> KPTEjlbVUjP9UNV%2BmWwD5MlM%2FMtsq2azSiGM5bUMMj4QssxsodyamEwC%5CnW%2FPOuZ6lcg
> 5Ktz885hZo%2BL7tdEy8W9ViH0Pd%5Cn-----END+CERTIFICATE-----&command=uploadCust
> omCertificate&domainsuffix=domain.com&id=1&name=root&response=json&signature
> =CTxxxxxxxxM%2FxxxxxxxxTR%2Fck0%3D
> 2013-06-21 09:30:07,467 DEBUG [cloud.async.AsyncJobManagerImpl]
> (catalina-exec-20:null) submit async job-14, details: AsyncJobVO {id:14,
> userId: 2, accountId: 2, sessionKey: null, instanceType: None, instanceId:
> null, cmd:
> org.apache.cloudstack.api.command.admin.resource.UploadCustomCertificateCmd,
> cmdOriginator: null, cmdInfo:
> {"id":"1","response":"json","domainsuffix":"dynamicquest.com","certificate":
> "-----BEGIN
> CERTIFICATE-----\\nMIIC5xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxlDZXJ0\\nIFZh
> bxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxuYy4xNTAz\\nBgNVBAsTxxxxxxxxxxxxxxxxx
> xxxxxxxxxxxxxxgQXV0aG9y\\naXR5MSEwHwYDVQQDExhodHRwOi8vd3d3LnZhbGljZXJ0LmNvbS
> 8xIDAeBgkqhkiG\\n9w0BCQEWEWluZm9AdmFsaWNlcnQuY29tMB4XDTk5MDYyNjAwMTk1NFoXDTE
> 5MDYy\\nNjAwMTk1NFowgbsxJDAiBgNVBAcTG1ZhbGlDZXJ0IFZhbGlkYXRpb24gTmV0d29y\\na
> zEXMBUGA1UEChMOVmFsaUNlcnQsIEluYy4xNTAzBgNVBAsTLFZhbGlDZXJ0IENs\\nYXNzIDIgUG
> 9saWNxxxxxxxxxxxxxxxxxxxxxxxxxxxVQQDExhodHRw\\nOi8vd3d3LnZhbGljZXJ0LmNvbS8xI
> DAeBgkqhkiG9w0BCQEWEWluZm9AdmFsaWNl\\ncnQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNAD
> CBiQKBgQDOOnHK5avIWZJV16vY\\ndA757tn2VUdZZUcOBVXc65g2PFxTXdMwzzjsvUGJ7SVCCSR
> rCl6zfN1SLUzm1NZ9\\nWlmpZdRJEy0kTRxQb7XBhVQ7/nHk01xC+YDgkRoKWzk2Z/M/VXwbP7Rf
> ZHM047QS\\nv4dk+NoS/zcnwbNDu+97bi5p9wIDAQABxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxBAD
> t/UG9v\\nUJSZSWI4OB9L+KXIPqeCgfYrx+jFzug6EILLGACOTb2oWH+heQC1u+mNr0HZDzTu\\n
> IYEZoDJJKPTEjlbVUjP9UNV+mWwD5MlM/MtsqxxxxxxxxxxxxxxxxxxxxxxxxxxxxamEwC\\
> IYEZoDJJKPTEjlbVUjP9UNV+nW/P
> OuZ6lcg5Ktz885hZo+L7tdEy8W9ViH0Pd\\n-----END
> CERTIFICATE-----","ctxUserId":"2","name":"root","ctxAccountId":"2","ctxStart
> EventId":"111","apiKey":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
> "signature":"CTxxxxxxxxxxxM/wf5Txxxxxxxx/ck0\uxxxxx"}, cmdVersion: 0,
> callbackType: 0, callbackAddress: null, status: 0, processStatus: 0,
> resultCode: 0, result: null, initMsid: 227165843378938, completeMsid: null,
> lastUpdated: null, lastPolled: null, created: null}
> 2013-06-21 09:30:07,473 DEBUG [cloud.api.ApiServlet] (catalina-exec-20:null)
> ===END===  74.122.165.7 -- GET
> apiKey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&
> certificate=-----BEGIN+CERTIFICATE-----%5Cnxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> xxxxxxxxxxxxxxxxxxxbGlDZXJ0%5CnIFZhbGlkYXRpb24gTmV0d29yazEXMBUGA1UEChMOVmFsa
> UNlcnQsIEluYy4xNTAz%5CnBgNVBAsTLFZhbGlDZXJ0IENsYXNzIDIgUG9saWN5IFZhbGlkYXRpb
> 24gQXV0aG9y%5CnaXR5MSEwHwYDVQQDExhodHRwOi8vd3d3LnZhbGljZXJ0LmNvbS8xIDAeBgkqh
> kiG%5Cn9w0BCQEWEWluZm9AdmFsaWNlcnQuY29tMB4XDTk5MDYyNjAwMTk1NFoXDTE5MDYy%5CnN
> jAwMTkxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxpb24gTmV0d29y%5CnazEXMB
> UGxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxDZXJ0IENs%5CnYXNz
> IDIgUG9saWN5IFZhbGlkYXRpb24gQXV0aG9yaXR5MSEwHwYDVQQDExhodHRw%5CnOi8vd3d3LnZh
> bGljZXJ0LmNvbS8xIDAeBgkqhkiG9w0BCQEWEWluZm9AdmFsaWNl%5CncnQuY29tMIGfMA0GCSqG
> SIb3DQEBAQUAA4GNADCBiQKBgQDOOnHK5avIWZJV16vY%5CndAxxxxxxxxxxxxxxxxxxxxxxxxxx
> xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxUzm1NZ9%5CnWlmpZdRJEy0kTRxQb7XBhVQ7%2FnHk01
> xC%2BYDgkRoKWzk2Z%2FM%2FVXwbP7RfZHM047QS%5Cnv4dk%2BNoS%2FzcnwbNDu%2B97bi5p9w
> IDAQABMA0GCSqGSIb3DQEBBQUAA4GBADt%2FUG9v%5CnUJSZSWI4OB9L%2BKXIPqeCgfYrx%2BjF
> zug6EILLGACOTb2oWH%2BheQC1u%xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx%2BmW
> wD5MlM%2FMtsqxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxmEwC%5CnW%2FPOuZ6lcg5Ktz885hZo%2
> BL7tdEy8W9ViH0Pd%5Cn-----END+CERTIFICATE-----&command=uploadCustomCertificat
> e&domainsuffix=domain.com&id=1&name=root&response=json&signature=CTxxxxxxxxx
> xxxYM%2xxxxxxxxxxxxPTR%2Fck0%3D
> 2013-06-21 09:30:07,474 DEBUG [cloud.async.AsyncJobManagerImpl]
> (Job-Executor-5:job-14) Executing
> org.apache.cloudstack.api.command.admin.resource.UploadCustomCertificateCmd
> for job-14
> 2013-06-21 09:30:07,484 ERROR [cloud.async.AsyncJobManagerImpl]
> (Job-Executor-5:job-14) Unexpected exception while executing
> org.apache.cloudstack.api.command.admin.resource.UploadCustomCertificateCmd
> java.lang.NullPointerException
>         at
> com.cloud.server.ManagementServerImpl.uploadCertificate(ManagementServerImpl
> .java:2818)
>         at
> com.cloud.utils.component.ComponentInstantiationPostProcessor$InterceptorDis
> patcher.intercept(ComponentInstantiationPostProcessor.java:125)
>         at
> org.apache.cloudstack.api.command.admin.resource.UploadCustomCertificateCmd.
> execute(UploadCustomCertificateCmd.java:98)
>         at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:162)
>         at
> com.cloud.async.AsyncJobManagerImpl$1.run(AsyncJobManagerImpl.java:437)
>         at
> java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
>         at
> java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
>         at java.util.concurrent.FutureTask.run(FutureTask.java:166)
>         at
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:11
> 46)
>         at
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:6
> 15)
>         at java.lang.Thread.run(Thread.java:679)
> 2013-06-21 09:30:07,486 DEBUG [cloud.async.AsyncJobManagerImpl]
> (Job-Executor-5:job-14) Complete async job-14, jobStatus: 2, resultCode:
> 530, result: Error Code: 530 Error text: null
> 2013-06-21 09:30:09,489 DEBUG [cloud.api.ApiServlet] (catalina-exec-17:null)
> ===START===  74.122.165.7 -- GET
> apiKey=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> xxx&command=queryAsyncJobResult&jobid=9bf7a862-8f0b-464b-ba6d-a22cf6f603c8&r
> esponse=json&signature=aRFxxxxxxxxxxxxxxxxxxxxCc8%3D
> 2013-06-21 09:30:09,522 DEBUG [cloud.async.AsyncJobManagerImpl]
> (catalina-exec-17:null) Async job-14 completed
> 
> 
> 
> 
>