You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Adam Witwicki <aw...@oakfordis.com> on 2018/05/04 07:36:48 UTC
Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
RE: Upgrading from 4.9 to 4.11
Posted by Adam Witwicki <aw...@oakfordis.com>.
All good now
Thanks
-----Original Message-----
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 09 May 2018 17:49
To: users@cloudstack.apache.org
Subject: Re: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Adam,
With your new setup, were you able to solve the issue or is this still an issue?
If this is still an issue, ensure that the ca strictness global setting is false, remove any cert/jks files on KVM host and use provisionCertificate API to force provisioning of certificate to an already connected KVM host.
Backup/remove the rpmsave file, looks like you choose to install the package provided agent.properties file instead of what you already have. For an already added host, you should keep your old agent.properties file instead of use the new one which will be blank (empty of configuration).
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Adam Witwicki <aw...@oakfordis.com>
Sent: Friday, May 4, 2018 5:45:39 PM
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
Hi Rohit,
Those instructions were followed
There was no keystore.passphrase= in agent.properties, it was found in agent.properties.rpmsave
Removing cloud.jks hasn't worked I now get in management log
2018-05-04 13:03:33,246 DEBUG [c.c.u.s.SSHCmdHelper] (qtp510113906-18:ctx-4f329b77 ctx-c350b74b) (logid:29765313) SSH command: /usr/share/cloudstack-common/scripts/util/keystore-cert-import /etc/cloudstack/agent/agent.properties /etc/cloudstack/agent/
2018-05-04 13:03:33,247 ERROR [c.c.h.k.d.LibvirtServerDiscoverer] (qtp510113906-18:ctx-4f329b77 ctx-c350b74b) (logid:29765313) Failed to setup certificate in the KVM agent's keystore file, please configure manually!
I can't find any instructions configure manually!
Is anyone able to provide some?
Thanks
Adam
rohit.yadav@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 04 May 2018 13:02
To: users@cloudstack.apache.org
Subject: Re: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
If you're upgrading to 4.11.0.0, please use the correct release notes:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.11.0.0/
When you upgrade, you'll need to upgrade both management server(s) and kvm host agents to make it work. By default, the new CA service will keep the global setting 'ca.plugin.root.auth.strictness ' to false for an existing deployment (this is only true for new/fresh installations).
When the above global setting is false, and you want legacy behaviour make sure you don't have any cloud.jks in your KVM hosts's /etc/cloudstack/agent/ path. On the management server side, 4.11.0.0 creates a cloud.jks which holds a random certificate (starting 4.11.1.0 this won't be necessary, and this file will not be created in mgmt server's /etc/cloudstack/management/ path).
If you make any changes (and after upgrades), try to restart the management server(s) and kvm host agent(s).
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Adam Witwicki <aw...@oakfordis.com>
Sent: Friday, May 4, 2018 1:06:48 PM
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
rohit.yadav@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Re: Upgrading from 4.9 to 4.11
Posted by Rohit Yadav <ro...@shapeblue.com>.
Adam,
With your new setup, were you able to solve the issue or is this still an issue?
If this is still an issue, ensure that the ca strictness global setting is false, remove any cert/jks files on KVM host and use provisionCertificate API to force provisioning of certificate to an already connected KVM host.
Backup/remove the rpmsave file, looks like you choose to install the package provided agent.properties file instead of what you already have. For an already added host, you should keep your old agent.properties file instead of use the new one which will be blank (empty of configuration).
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Adam Witwicki <aw...@oakfordis.com>
Sent: Friday, May 4, 2018 5:45:39 PM
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
Hi Rohit,
Those instructions were followed
There was no keystore.passphrase= in agent.properties, it was found in agent.properties.rpmsave
Removing cloud.jks hasn’t worked I now get in management log
2018-05-04 13:03:33,246 DEBUG [c.c.u.s.SSHCmdHelper] (qtp510113906-18:ctx-4f329b77 ctx-c350b74b) (logid:29765313) SSH command: /usr/share/cloudstack-common/scripts/util/keystore-cert-import /etc/cloudstack/agent/agent.properties /etc/cloudstack/agent/
2018-05-04 13:03:33,247 ERROR [c.c.h.k.d.LibvirtServerDiscoverer] (qtp510113906-18:ctx-4f329b77 ctx-c350b74b) (logid:29765313) Failed to setup certificate in the KVM agent's keystore file, please configure manually!
I can't find any instructions configure manually!
Is anyone able to provide some?
Thanks
Adam
rohit.yadav@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK
@shapeblue
-----Original Message-----
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 04 May 2018 13:02
To: users@cloudstack.apache.org
Subject: Re: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
If you're upgrading to 4.11.0.0, please use the correct release notes:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.11.0.0/
When you upgrade, you'll need to upgrade both management server(s) and kvm host agents to make it work. By default, the new CA service will keep the global setting 'ca.plugin.root.auth.strictness ' to false for an existing deployment (this is only true for new/fresh installations).
When the above global setting is false, and you want legacy behaviour make sure you don't have any cloud.jks in your KVM hosts's /etc/cloudstack/agent/ path. On the management server side, 4.11.0.0 creates a cloud.jks which holds a random certificate (starting 4.11.1.0 this won't be necessary, and this file will not be created in mgmt server's /etc/cloudstack/management/ path).
If you make any changes (and after upgrades), try to restart the management server(s) and kvm host agent(s).
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Adam Witwicki <aw...@oakfordis.com>
Sent: Friday, May 4, 2018 1:06:48 PM
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
rohit.yadav@shapeblue.com
www.shapeblue.com<http://www.shapeblue.com>
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
RE: Upgrading from 4.9 to 4.11
Posted by Adam Witwicki <aw...@oakfordis.com>.
Hi Rohit,
Those instructions were followed
There was no keystore.passphrase= in agent.properties, it was found in agent.properties.rpmsave
Removing cloud.jks hasn’t worked I now get in management log
2018-05-04 13:03:33,246 DEBUG [c.c.u.s.SSHCmdHelper] (qtp510113906-18:ctx-4f329b77 ctx-c350b74b) (logid:29765313) SSH command: /usr/share/cloudstack-common/scripts/util/keystore-cert-import /etc/cloudstack/agent/agent.properties /etc/cloudstack/agent/
2018-05-04 13:03:33,247 ERROR [c.c.h.k.d.LibvirtServerDiscoverer] (qtp510113906-18:ctx-4f329b77 ctx-c350b74b) (logid:29765313) Failed to setup certificate in the KVM agent's keystore file, please configure manually!
I can't find any instructions configure manually!
Is anyone able to provide some?
Thanks
Adam
-----Original Message-----
From: Rohit Yadav <ro...@shapeblue.com>
Sent: 04 May 2018 13:02
To: users@cloudstack.apache.org
Subject: Re: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
If you're upgrading to 4.11.0.0, please use the correct release notes:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.11.0.0/
When you upgrade, you'll need to upgrade both management server(s) and kvm host agents to make it work. By default, the new CA service will keep the global setting 'ca.plugin.root.auth.strictness ' to false for an existing deployment (this is only true for new/fresh installations).
When the above global setting is false, and you want legacy behaviour make sure you don't have any cloud.jks in your KVM hosts's /etc/cloudstack/agent/ path. On the management server side, 4.11.0.0 creates a cloud.jks which holds a random certificate (starting 4.11.1.0 this won't be necessary, and this file will not be created in mgmt server's /etc/cloudstack/management/ path).
If you make any changes (and after upgrades), try to restart the management server(s) and kvm host agent(s).
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Adam Witwicki <aw...@oakfordis.com>
Sent: Friday, May 4, 2018 1:06:48 PM
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
rohit.yadav@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Re: Upgrading from 4.9 to 4.11
Posted by Rohit Yadav <ro...@shapeblue.com>.
Hi Adam,
If you're upgrading to 4.11.0.0, please use the correct release notes:
http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.11.0.0/
When you upgrade, you'll need to upgrade both management server(s) and kvm host agents to make it work. By default, the new CA service will keep the global setting 'ca.plugin.root.auth.strictness ' to false for an existing deployment (this is only true for new/fresh installations).
When the above global setting is false, and you want legacy behaviour make sure you don't have any cloud.jks in your KVM hosts's /etc/cloudstack/agent/ path. On the management server side, 4.11.0.0 creates a cloud.jks which holds a random certificate (starting 4.11.1.0 this won't be necessary, and this file will not be created in mgmt server's /etc/cloudstack/management/ path).
If you make any changes (and after upgrades), try to restart the management server(s) and kvm host agent(s).
- Rohit
<https://cloudstack.apache.org>
________________________________
From: Adam Witwicki <aw...@oakfordis.com>
Sent: Friday, May 4, 2018 1:06:48 PM
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
rohit.yadav@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK
@shapeblue
RE: Upgrading from 4.9 to 4.11
Posted by Adam Witwicki <aw...@oakfordis.com>.
I don’t have a keystore.passphrase= in /etc/cloudstack/agent/agent.properties
But I do have cloud.jks - where can I find the passphrase?
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 10:56
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Paul,
Yes I have upgraded the KVM agents, they complain about a missing keystore
2018-05-04 10:55:39,478 WARN [cloud.agent.Agent] (main:null) (logid:) NIO Connection Exception com.cloud.utils.exception.NioCnnectionException: Keystore was tampered with, or password was incorrect
2018-05-04 10:55:39,478 INFO [cloud.agent.Agent] (main:null) (logid:) Attempted to connect to the server, but received an unexected exception, trying again...
Thanks
Adam
-----Original Message-----
From: Paul Angus <pa...@shapeblue.com>
Sent: 04 May 2018 10:55
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Just checking - have you upgraded the KVM agents also?
are there any error messages in the agent logs on the KVM hosts?
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 10:46
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
Hi Paul, only one IP address and ca.plugin.root.auth.strictness is already false
Thanks
Adam
-----Original Message-----
From: Paul Angus <pa...@shapeblue.com>
Sent: 04 May 2018 10:44
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
Do you have multiple IPs on the KVM hosts?
If so, this is a known issue which will be fixed in 4.11.1 (host is sending 'wrong' IP with its certificate).
the work around in 4.11.0 is to set the global setting:
ca.plugin.root.auth.strictness to false
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 08:37
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
RE: Upgrading from 4.9 to 4.11
Posted by Adam Witwicki <aw...@oakfordis.com>.
Hi Paul,
Yes I have upgraded the KVM agents, they complain about a missing keystore
2018-05-04 10:55:39,478 WARN [cloud.agent.Agent] (main:null) (logid:) NIO Connection Exception com.cloud.utils.exception.NioCnnectionException: Keystore was tampered with, or password was incorrect
2018-05-04 10:55:39,478 INFO [cloud.agent.Agent] (main:null) (logid:) Attempted to connect to the server, but received an unexected exception, trying again...
Thanks
Adam
-----Original Message-----
From: Paul Angus <pa...@shapeblue.com>
Sent: 04 May 2018 10:55
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Just checking - have you upgraded the KVM agents also?
are there any error messages in the agent logs on the KVM hosts?
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 10:46
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
Hi Paul, only one IP address and ca.plugin.root.auth.strictness is already false
Thanks
Adam
-----Original Message-----
From: Paul Angus <pa...@shapeblue.com>
Sent: 04 May 2018 10:44
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
Do you have multiple IPs on the KVM hosts?
If so, this is a known issue which will be fixed in 4.11.1 (host is sending 'wrong' IP with its certificate).
the work around in 4.11.0 is to set the global setting:
ca.plugin.root.auth.strictness to false
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 08:37
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
RE: Upgrading from 4.9 to 4.11
Posted by Paul Angus <pa...@shapeblue.com>.
Just checking - have you upgraded the KVM agents also?
are there any error messages in the agent logs on the KVM hosts?
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK
@shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 10:46
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
Hi Paul, only one IP address and ca.plugin.root.auth.strictness is already false
Thanks
Adam
-----Original Message-----
From: Paul Angus <pa...@shapeblue.com>
Sent: 04 May 2018 10:44
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
Do you have multiple IPs on the KVM hosts?
If so, this is a known issue which will be fixed in 4.11.1 (host is sending 'wrong' IP with its certificate).
the work around in 4.11.0 is to set the global setting:
ca.plugin.root.auth.strictness to false
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 08:37
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
RE: Upgrading from 4.9 to 4.11
Posted by Adam Witwicki <aw...@oakfordis.com>.
Hi Paul, only one IP address and ca.plugin.root.auth.strictness is already false
Thanks
Adam
-----Original Message-----
From: Paul Angus <pa...@shapeblue.com>
Sent: 04 May 2018 10:44
To: users@cloudstack.apache.org
Subject: RE: Upgrading from 4.9 to 4.11
** This mail originated from OUTSIDE the Oakford corporate network. Treat hyperlinks and attachments in this email with caution. **
Hi Adam,
Do you have multiple IPs on the KVM hosts?
If so, this is a known issue which will be fixed in 4.11.1 (host is sending 'wrong' IP with its certificate).
the work around in 4.11.0 is to set the global setting:
ca.plugin.root.auth.strictness to false
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK @shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 08:37
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519
RE: Upgrading from 4.9 to 4.11
Posted by Paul Angus <pa...@shapeblue.com>.
Hi Adam,
Do you have multiple IPs on the KVM hosts?
If so, this is a known issue which will be fixed in 4.11.1 (host is sending 'wrong' IP with its certificate).
the work around in 4.11.0 is to set the global setting:
ca.plugin.root.auth.strictness to false
Kind regards,
Paul Angus
paul.angus@shapeblue.com
www.shapeblue.com
53 Chandos Place, Covent Garden, London WC2N 4HSUK
@shapeblue
-----Original Message-----
From: Adam Witwicki <aw...@oakfordis.com>
Sent: 04 May 2018 08:37
To: users@cloudstack.apache.org
Subject: Upgrading from 4.9 to 4.11
Hello
Upgrading from 4.9 t0 4.11 using this guide http://docs.cloudstack.apache.org/projects/cloudstack-release-notes/en/4.10/upgrade/upgrade-4.9.html
None of my KVM hosts are connecting with this in the management server log
2018-05-04 08:31:13,774 WARN [c.c.u.n.Link] (AgentManager-SSLHandshakeHandler-4:null) (logid:) SSL Handshake has taken more than 15s to connect to: /192.168.200.109:50492. Please investigate this connection.
Any Ideas?
Thanks
Adam Witwicki
Disclaimer Notice:
This email has been sent by Oakford Technology Limited, while we have checked this e-mail and any attachments for viruses, we can not guarantee that they are virus-free. You must therefore take full responsibility for virus checking.
This message and any attachments are confidential and should only be read by those to whom they are addressed. If you are not the intended recipient, please contact us, delete the message from your computer and destroy any copies. Any distribution or copying without our prior permission is prohibited.
Internet communications are not always secure and therefore Oakford Technology Limited does not accept legal responsibility for this message. The recipient is responsible for verifying its authenticity before acting on the contents. Any views or opinions presented are solely those of the author and do not necessarily represent those of Oakford Technology Limited.
Registered address: Oakford Technology Limited, 10 Prince Maurice Court, Devizes, Wiltshire. SN10 2RT.
Registered in England and Wales No. 5971519