You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Benjamin Naber - NETFORMIC GmbH <Be...@netformic.de> on 2017/10/16 15:13:46 UTC
https Repo links don't work
Hi together,
i have an issue deploying templates with https Repo Links.
When i create a global template like debian stretch netinstall and the ISO file is located on a https backlink (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso).
the following error occours:
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
OS: CentOS7
CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
Did anyone managed to fix it?
Kind Regards
Benjamin Naber
System Administrator
Telefon: +49 (0)711 761642-445
benjamin.naber@netformic.de
[cid:image001.png@01D346A2.20405690]<https://netformic.de/>
NETFORMIC GmbH
HRB 720729, Amtsgericht Stuttgart
USt-IdNr.: DE814688053
Geschäftsführer: Jens Rilling, Timo Weltner
Stuttgart
Hermannstraße 5A, 70178 Stuttgart
Telefon: +49 (0)711 761642-0, Fax: -26
Berlin
Fanny-Zobel-Straße 11, 12435 Berlin
Telefon: +49 (0)30 60984747-0, Fax: -9
Re: AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Sudhansu,
where these "systemvm" directorys located ?
cant find them on systemvm template vhd.
Kind regards
Benjamin
> Sudhansu Sahu <su...@accelerite.com> hat am 18. Oktober 2017 um 09:34 geschrieben:
>
>
> Its overridden by jvm argument -Djavax.net.ssl.trustStore (/usr/local/cloud/systemvm/secstorage.sh).
>
> Thanks
> Sudhansu
>
> On 10/17/17, 2:34 PM, "Benjamin Naber" <be...@coders-area.de> wrote:
>
> Hi Sudhansu,
>
> ty for Bug Reporting. You know by which script the realhostip.keystore will be overwriten ?
>
> I cant find the path or file in the basic systemvm template.
>
> Kind regards
>
> benjamin
>
> > Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 10:51 geschrieben:
> >
> > I have created below defect for this. https://issues.apache.org/jira/browse/CLOUDSTACK-10112
> >
> > Sent from my iPhone
> >
> > On 17-Oct-2017, at 1:56 PM, Benjamin Naber <be...@coders-area.de>> wrote:
> >
> > Hi Sudhansu,
> >
> > that fix worked for me. thanks for your help.
> >
> > Kind regards
> >
> > Benjamin
> > Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 10:03 geschrieben:
> >
> > For realhostip.keystore the password is ‘vmops.com<http://vmops.com>’. and for java keystore the password is ‘changeit’.
> >
> > Thanks
> > Sudhansu Sahu
> >
> > On 10/17/17, 1:29 PM, "Benjamin Naber" <be...@coders-area.de>> wrote:
> >
> > Hi Sudhansu,
> >
> > ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
> >
> > Kind regards
> >
> > Benjamin
> >
> > Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 06:25 geschrieben:
> >
> > In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
> >
> > Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
> >
> > keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
> >
> > Thanks
> > Sudhansu Sahu
> >
> > On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br>> wrote:
> >
> > Well, if everything is there, then you should not see this error of
> > unable to build the certification path.
> >
> > Then, it would be a good idea to check which cacerts Java is using.
> >
> > On 10/16/2017 1:54 PM, Benjamin Naber wrote:
> >
> > Hi Rafael,
> >
> > i exported the Keystore to textfile and checked fingerprints.
> >
> > root CAs also in the Keystore.
> >
> > Kind Regards
> >
> > Benjamin
> >
> > Rafael Weingärtner <ra...@autonomiccs.com.br>> hat am 16. Oktober 2017 um 17:45 geschrieben:
> >
> > How did you check the certificates? Did you list and checked by name? Or
> > by fingerprint?
> >
> > Also, did you check if the root CA was there as well? For instance, the
> > Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> > encrypt CA's certificate)
> >
> > On 10/16/2017 1:42 PM, Benjamin Naber wrote:
> >
> > Hi Rafael,
> >
> > ive allready checked the Java Keystore. All Certificates are included.
> >
> > Im using ACS 4.10
> >
> > Kind Regards
> >
> > Benjamin
> >
> > Benjamin Naber <be...@coders-area.de>> hat am 16. Oktober 2017 um 17:26 geschrieben:
> >
> > Hi Rafael,
> >
> > Currently no ssl Backlund works. Also COMODO Certificates don't work.
> >
> > Kind Regards
> >
> > Benjamin
> >
> > Von meinem Huawei-Mobiltelefon gesendet
> >
> > -------- Originalnachricht --------
> > Betreff: Re: https Repo links don't work
> > Von: Rafael Weingärtner <ra...@autonomiccs.com.br>>
> > An: users@cloudstack.apache.org<ma...@cloudstack.apache.org>
> > Cc:
> >
> > Probably the let´s encrypt CA is not in your java keystore. You will
> > need to add it.
> >
> > On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
> >
> > Hi together,
> >
> > i have an issue deploying templates with https Repo Links.
> >
> > When i create a global template like debian stretch netinstall and the
> > ISO file is located on a https backlink
> > (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> > <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
> >
> > the following error occours:
> >
> > sun.security.validator.ValidatorException: PKIX path building failed:
> > sun.security.provider.certpath.SunCertPathBuilderException: unable to
> > find valid certification path to requested target
> >
> > OS: CentOS7
> >
> > CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> > <http://cloudstack.apt-get.eu/centos/7/4.10/>
> >
> > Did anyone managed to fix it?
> >
> > Kind Regards
> >
> > *Benjamin Naber*
> >
> > System Administrator
> >
> > Telefon: +49 (0)711 761642-445
> > benjamin.naber@netformic.de<ma...@netformic.de>
> >
> > <https://netformic.de/>
> >
> > *NETFORMIC GmbH*
> > HRB 720729, Amtsgericht Stuttgart
> > USt-IdNr.: DE814688053
> > Geschäftsführer: Jens Rilling, Timo Weltner
> >
> > *Stuttgart*
> > Hermannstraße 5A, 70178 Stuttgart
> > Telefon: +49 (0)711 761642-0, Fax: -26
> >
> > *Berlin*
> > Fanny-Zobel-Straße 11, 12435 Berlin
> >
> > Telefon: +49 (0)30 60984747-0, Fax: -9
> > --
> >
> > Rafael Weingärtner
> > --
> > Rafael Weingärtner
> >
> > ___________________________________________________
> > Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> > Mobil: +49 (0) 152.34087809
> > E-Mail: benjamin.naber@coders-area.de<ma...@coders-area.de>
> >
> > ___________________________________________________
> > Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
> >
> > --
> > Rafael Weingärtner
> >
> > DISCLAIMER
> > ==========
> > This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
>
>
Re: AW:https Repo links don't work
Posted by Sudhansu Sahu <su...@accelerite.com>.
Its overridden by jvm argument -Djavax.net.ssl.trustStore (/usr/local/cloud/systemvm/secstorage.sh).
Thanks
Sudhansu
On 10/17/17, 2:34 PM, "Benjamin Naber" <be...@coders-area.de> wrote:
Hi Sudhansu,
ty for Bug Reporting. You know by which script the realhostip.keystore will be overwriten ?
I cant find the path or file in the basic systemvm template.
Kind regards
benjamin
> Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 10:51 geschrieben:
>
> I have created below defect for this. https://issues.apache.org/jira/browse/CLOUDSTACK-10112
>
> Sent from my iPhone
>
> On 17-Oct-2017, at 1:56 PM, Benjamin Naber <be...@coders-area.de>> wrote:
>
> Hi Sudhansu,
>
> that fix worked for me. thanks for your help.
>
> Kind regards
>
> Benjamin
> Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 10:03 geschrieben:
>
> For realhostip.keystore the password is ‘vmops.com<http://vmops.com>’. and for java keystore the password is ‘changeit’.
>
> Thanks
> Sudhansu Sahu
>
> On 10/17/17, 1:29 PM, "Benjamin Naber" <be...@coders-area.de>> wrote:
>
> Hi Sudhansu,
>
> ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
>
> Kind regards
>
> Benjamin
>
> Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 06:25 geschrieben:
>
> In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
>
> Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
>
> keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
>
> Thanks
> Sudhansu Sahu
>
> On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br>> wrote:
>
> Well, if everything is there, then you should not see this error of
> unable to build the certification path.
>
> Then, it would be a good idea to check which cacerts Java is using.
>
> On 10/16/2017 1:54 PM, Benjamin Naber wrote:
>
> Hi Rafael,
>
> i exported the Keystore to textfile and checked fingerprints.
>
> root CAs also in the Keystore.
>
> Kind Regards
>
> Benjamin
>
> Rafael Weingärtner <ra...@autonomiccs.com.br>> hat am 16. Oktober 2017 um 17:45 geschrieben:
>
> How did you check the certificates? Did you list and checked by name? Or
> by fingerprint?
>
> Also, did you check if the root CA was there as well? For instance, the
> Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> encrypt CA's certificate)
>
> On 10/16/2017 1:42 PM, Benjamin Naber wrote:
>
> Hi Rafael,
>
> ive allready checked the Java Keystore. All Certificates are included.
>
> Im using ACS 4.10
>
> Kind Regards
>
> Benjamin
>
> Benjamin Naber <be...@coders-area.de>> hat am 16. Oktober 2017 um 17:26 geschrieben:
>
> Hi Rafael,
>
> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>
> Kind Regards
>
> Benjamin
>
> Von meinem Huawei-Mobiltelefon gesendet
>
> -------- Originalnachricht --------
> Betreff: Re: https Repo links don't work
> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>>
> An: users@cloudstack.apache.org<ma...@cloudstack.apache.org>
> Cc:
>
> Probably the let´s encrypt CA is not in your java keystore. You will
> need to add it.
>
> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>
> Hi together,
>
> i have an issue deploying templates with https Repo Links.
>
> When i create a global template like debian stretch netinstall and the
> ISO file is located on a https backlink
> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>
> the following error occours:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
>
> OS: CentOS7
>
> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>
> Did anyone managed to fix it?
>
> Kind Regards
>
> *Benjamin Naber*
>
> System Administrator
>
> Telefon: +49 (0)711 761642-445
> benjamin.naber@netformic.de<ma...@netformic.de>
>
> <https://netformic.de/>
>
> *NETFORMIC GmbH*
> HRB 720729, Amtsgericht Stuttgart
> USt-IdNr.: DE814688053
> Geschäftsführer: Jens Rilling, Timo Weltner
>
> *Stuttgart*
> Hermannstraße 5A, 70178 Stuttgart
> Telefon: +49 (0)711 761642-0, Fax: -26
>
> *Berlin*
> Fanny-Zobel-Straße 11, 12435 Berlin
>
> Telefon: +49 (0)30 60984747-0, Fax: -9
> --
>
> Rafael Weingärtner
> --
> Rafael Weingärtner
>
> ___________________________________________________
> Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> Mobil: +49 (0) 152.34087809
> E-Mail: benjamin.naber@coders-area.de<ma...@coders-area.de>
>
> ___________________________________________________
> Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
>
> --
> Rafael Weingärtner
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Sudhansu,
ty for Bug Reporting. You know by which script the realhostip.keystore will be overwriten ?
I cant find the path or file in the basic systemvm template.
Kind regards
benjamin
> Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 10:51 geschrieben:
>
> I have created below defect for this. https://issues.apache.org/jira/browse/CLOUDSTACK-10112
>
> Sent from my iPhone
>
> On 17-Oct-2017, at 1:56 PM, Benjamin Naber <be...@coders-area.de>> wrote:
>
> Hi Sudhansu,
>
> that fix worked for me. thanks for your help.
>
> Kind regards
>
> Benjamin
> Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 10:03 geschrieben:
>
> For realhostip.keystore the password is ‘vmops.com<http://vmops.com>’. and for java keystore the password is ‘changeit’.
>
> Thanks
> Sudhansu Sahu
>
> On 10/17/17, 1:29 PM, "Benjamin Naber" <be...@coders-area.de>> wrote:
>
> Hi Sudhansu,
>
> ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
>
> Kind regards
>
> Benjamin
>
> Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 06:25 geschrieben:
>
> In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
>
> Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
>
> keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
>
> Thanks
> Sudhansu Sahu
>
> On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br>> wrote:
>
> Well, if everything is there, then you should not see this error of
> unable to build the certification path.
>
> Then, it would be a good idea to check which cacerts Java is using.
>
> On 10/16/2017 1:54 PM, Benjamin Naber wrote:
>
> Hi Rafael,
>
> i exported the Keystore to textfile and checked fingerprints.
>
> root CAs also in the Keystore.
>
> Kind Regards
>
> Benjamin
>
> Rafael Weingärtner <ra...@autonomiccs.com.br>> hat am 16. Oktober 2017 um 17:45 geschrieben:
>
> How did you check the certificates? Did you list and checked by name? Or
> by fingerprint?
>
> Also, did you check if the root CA was there as well? For instance, the
> Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> encrypt CA's certificate)
>
> On 10/16/2017 1:42 PM, Benjamin Naber wrote:
>
> Hi Rafael,
>
> ive allready checked the Java Keystore. All Certificates are included.
>
> Im using ACS 4.10
>
> Kind Regards
>
> Benjamin
>
> Benjamin Naber <be...@coders-area.de>> hat am 16. Oktober 2017 um 17:26 geschrieben:
>
> Hi Rafael,
>
> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>
> Kind Regards
>
> Benjamin
>
> Von meinem Huawei-Mobiltelefon gesendet
>
> -------- Originalnachricht --------
> Betreff: Re: https Repo links don't work
> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>>
> An: users@cloudstack.apache.org<ma...@cloudstack.apache.org>
> Cc:
>
> Probably the let´s encrypt CA is not in your java keystore. You will
> need to add it.
>
> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>
> Hi together,
>
> i have an issue deploying templates with https Repo Links.
>
> When i create a global template like debian stretch netinstall and the
> ISO file is located on a https backlink
> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>
> the following error occours:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
>
> OS: CentOS7
>
> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>
> Did anyone managed to fix it?
>
> Kind Regards
>
> *Benjamin Naber*
>
> System Administrator
>
> Telefon: +49 (0)711 761642-445
> benjamin.naber@netformic.de<ma...@netformic.de>
>
> <https://netformic.de/>
>
> *NETFORMIC GmbH*
> HRB 720729, Amtsgericht Stuttgart
> USt-IdNr.: DE814688053
> Geschäftsführer: Jens Rilling, Timo Weltner
>
> *Stuttgart*
> Hermannstraße 5A, 70178 Stuttgart
> Telefon: +49 (0)711 761642-0, Fax: -26
>
> *Berlin*
> Fanny-Zobel-Straße 11, 12435 Berlin
>
> Telefon: +49 (0)30 60984747-0, Fax: -9
> --
>
> Rafael Weingärtner
> --
> Rafael Weingärtner
>
> ___________________________________________________
> Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> Mobil: +49 (0) 152.34087809
> E-Mail: benjamin.naber@coders-area.de<ma...@coders-area.de>
>
> ___________________________________________________
> Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
>
> --
> Rafael Weingärtner
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: AW:https Repo links don't work
Posted by Sudhansu Sahu <su...@accelerite.com>.
I have created below defect for this. https://issues.apache.org/jira/browse/CLOUDSTACK-10112
Sent from my iPhone
On 17-Oct-2017, at 1:56 PM, Benjamin Naber <be...@coders-area.de>> wrote:
Hi Sudhansu,
that fix worked for me. thanks for your help.
Kind regards
Benjamin
Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 10:03 geschrieben:
For realhostip.keystore the password is ‘vmops.com<http://vmops.com>’. and for java keystore the password is ‘changeit’.
Thanks
Sudhansu Sahu
On 10/17/17, 1:29 PM, "Benjamin Naber" <be...@coders-area.de>> wrote:
Hi Sudhansu,
ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
Kind regards
Benjamin
Sudhansu Sahu <su...@accelerite.com>> hat am 17. Oktober 2017 um 06:25 geschrieben:
In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
Thanks
Sudhansu Sahu
On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br>> wrote:
Well, if everything is there, then you should not see this error of
unable to build the certification path.
Then, it would be a good idea to check which cacerts Java is using.
On 10/16/2017 1:54 PM, Benjamin Naber wrote:
Hi Rafael,
i exported the Keystore to textfile and checked fingerprints.
root CAs also in the Keystore.
Kind Regards
Benjamin
Rafael Weingärtner <ra...@autonomiccs.com.br>> hat am 16. Oktober 2017 um 17:45 geschrieben:
How did you check the certificates? Did you list and checked by name? Or
by fingerprint?
Also, did you check if the root CA was there as well? For instance, the
Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
encrypt CA's certificate)
On 10/16/2017 1:42 PM, Benjamin Naber wrote:
Hi Rafael,
ive allready checked the Java Keystore. All Certificates are included.
Im using ACS 4.10
Kind Regards
Benjamin
Benjamin Naber <be...@coders-area.de>> hat am 16. Oktober 2017 um 17:26 geschrieben:
Hi Rafael,
Currently no ssl Backlund works. Also COMODO Certificates don't work.
Kind Regards
Benjamin
Von meinem Huawei-Mobiltelefon gesendet
-------- Originalnachricht --------
Betreff: Re: https Repo links don't work
Von: Rafael Weingärtner <ra...@autonomiccs.com.br>>
An: users@cloudstack.apache.org<ma...@cloudstack.apache.org>
Cc:
Probably the let´s encrypt CA is not in your java keystore. You will
need to add it.
On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
Hi together,
i have an issue deploying templates with https Repo Links.
When i create a global template like debian stretch netinstall and the
ISO file is located on a https backlink
(https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
<https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
the following error occours:
sun.security.validator.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
OS: CentOS7
CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
<http://cloudstack.apt-get.eu/centos/7/4.10/>
Did anyone managed to fix it?
Kind Regards
*Benjamin Naber*
System Administrator
Telefon: +49 (0)711 761642-445
benjamin.naber@netformic.de<ma...@netformic.de>
<https://netformic.de/>
*NETFORMIC GmbH*
HRB 720729, Amtsgericht Stuttgart
USt-IdNr.: DE814688053
Geschäftsführer: Jens Rilling, Timo Weltner
*Stuttgart*
Hermannstraße 5A, 70178 Stuttgart
Telefon: +49 (0)711 761642-0, Fax: -26
*Berlin*
Fanny-Zobel-Straße 11, 12435 Berlin
Telefon: +49 (0)30 60984747-0, Fax: -9
--
Rafael Weingärtner
--
Rafael Weingärtner
___________________________________________________
Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
Mobil: +49 (0) 152.34087809
E-Mail: benjamin.naber@coders-area.de<ma...@coders-area.de>
___________________________________________________
Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
--
Rafael Weingärtner
DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Sudhansu,
that fix worked for me. thanks for your help.
Kind regards
Benjamin
> Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 10:03 geschrieben:
>
> For realhostip.keystore the password is ‘vmops.com’. and for java keystore the password is ‘changeit’.
>
> Thanks
> Sudhansu Sahu
>
> On 10/17/17, 1:29 PM, "Benjamin Naber" <be...@coders-area.de> wrote:
>
> Hi Sudhansu,
>
> ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
>
> Kind regards
>
> Benjamin
>
> > Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 06:25 geschrieben:
> >
> > In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
> >
> > Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
> >
> > keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
> >
> > Thanks
> > Sudhansu Sahu
> >
> > On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br> wrote:
> >
> > Well, if everything is there, then you should not see this error of
> > unable to build the certification path.
> >
> > Then, it would be a good idea to check which cacerts Java is using.
> >
> > On 10/16/2017 1:54 PM, Benjamin Naber wrote:
> >
> > > Hi Rafael,
> > >
> > > i exported the Keystore to textfile and checked fingerprints.
> > >
> > > root CAs also in the Keystore.
> > >
> > > Kind Regards
> > >
> > > Benjamin
> > >
> > > > Rafael Weingärtner <ra...@autonomiccs.com.br> hat am 16. Oktober 2017 um 17:45 geschrieben:
> > > >
> > > > How did you check the certificates? Did you list and checked by name? Or
> > > > by fingerprint?
> > > >
> > > > Also, did you check if the root CA was there as well? For instance, the
> > > > Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> > > > encrypt CA's certificate)
> > > >
> > > > On 10/16/2017 1:42 PM, Benjamin Naber wrote:
> > > >
> > > > > Hi Rafael,
> > > > >
> > > > > ive allready checked the Java Keystore. All Certificates are included.
> > > > >
> > > > > Im using ACS 4.10
> > > > >
> > > > > Kind Regards
> > > > >
> > > > > Benjamin
> > > > >
> > > > > > Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
> > > > > >
> > > > > > Hi Rafael,
> > > > > >
> > > > > > Currently no ssl Backlund works. Also COMODO Certificates don't work.
> > > > > >
> > > > > > Kind Regards
> > > > > >
> > > > > > Benjamin
> > > > > >
> > > > > > Von meinem Huawei-Mobiltelefon gesendet
> > > > > >
> > > > > > -------- Originalnachricht --------
> > > > > > Betreff: Re: https Repo links don't work
> > > > > > Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
> > > > > > An: users@cloudstack.apache.org
> > > > > > Cc:
> > > > > >
> > > > > > Probably the let´s encrypt CA is not in your java keystore. You will
> > > > > > need to add it.
> > > > > >
> > > > > > On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
> > > > > >
> > > > > > > Hi together,
> > > > > > >
> > > > > > > i have an issue deploying templates with https Repo Links.
> > > > > > >
> > > > > > > When i create a global template like debian stretch netinstall and the
> > > > > > > ISO file is located on a https backlink
> > > > > > > (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> > > > > > > <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
> > > > > > >
> > > > > > > the following error occours:
> > > > > > >
> > > > > > > sun.security.validator.ValidatorException: PKIX path building failed:
> > > > > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to
> > > > > > > find valid certification path to requested target
> > > > > > >
> > > > > > > OS: CentOS7
> > > > > > >
> > > > > > > CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> > > > > > > <http://cloudstack.apt-get.eu/centos/7/4.10/>
> > > > > > >
> > > > > > > Did anyone managed to fix it?
> > > > > > >
> > > > > > > Kind Regards
> > > > > > >
> > > > > > > *Benjamin Naber*
> > > > > > >
> > > > > > > System Administrator
> > > > > > >
> > > > > > > Telefon: +49 (0)711 761642-445
> > > > > > > benjamin.naber@netformic.de
> > > > > > >
> > > > > > > <https://netformic.de/>
> > > > > > >
> > > > > > > *NETFORMIC GmbH*
> > > > > > > HRB 720729, Amtsgericht Stuttgart
> > > > > > > USt-IdNr.: DE814688053
> > > > > > > Geschäftsführer: Jens Rilling, Timo Weltner
> > > > > > >
> > > > > > > *Stuttgart*
> > > > > > > Hermannstraße 5A, 70178 Stuttgart
> > > > > > > Telefon: +49 (0)711 761642-0, Fax: -26
> > > > > > >
> > > > > > > *Berlin*
> > > > > > > Fanny-Zobel-Straße 11, 12435 Berlin
> > > > > > >
> > > > > > > Telefon: +49 (0)30 60984747-0, Fax: -9
> > > > > > > --
> > > > > > >
> > > > > > > Rafael Weingärtner
> > > > > > > --
> > > > > > > Rafael Weingärtner
> > > > > > >
> > > > > > > ___________________________________________________
> > > > > > > Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> > > > > > > Mobil: +49 (0) 152.34087809
> > > > > > > E-Mail: benjamin.naber@coders-area.de
> > > > > > >
> > > > > > > ___________________________________________________
> > > > > > > Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
> >
> > --
> > Rafael Weingärtner
> >
> > DISCLAIMER
> > ==========
> > This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: AW:https Repo links don't work
Posted by Sudhansu Sahu <su...@accelerite.com>.
For realhostip.keystore the password is ‘vmops.com’. and for java keystore the password is ‘changeit’.
Thanks
Sudhansu Sahu
On 10/17/17, 1:29 PM, "Benjamin Naber" <be...@coders-area.de> wrote:
Hi Sudhansu,
ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
Kind regards
Benjamin
> Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 06:25 geschrieben:
>
> In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
>
> Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
>
> keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
>
> Thanks
> Sudhansu Sahu
>
> On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br> wrote:
>
> Well, if everything is there, then you should not see this error of
> unable to build the certification path.
>
> Then, it would be a good idea to check which cacerts Java is using.
>
> On 10/16/2017 1:54 PM, Benjamin Naber wrote:
>
> > Hi Rafael,
> >
> > i exported the Keystore to textfile and checked fingerprints.
> >
> > root CAs also in the Keystore.
> >
> > Kind Regards
> >
> > Benjamin
> >
> > > Rafael Weingärtner <ra...@autonomiccs.com.br> hat am 16. Oktober 2017 um 17:45 geschrieben:
> > >
> > > How did you check the certificates? Did you list and checked by name? Or
> > > by fingerprint?
> > >
> > > Also, did you check if the root CA was there as well? For instance, the
> > > Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> > > encrypt CA's certificate)
> > >
> > > On 10/16/2017 1:42 PM, Benjamin Naber wrote:
> > >
> > > > Hi Rafael,
> > > >
> > > > ive allready checked the Java Keystore. All Certificates are included.
> > > >
> > > > Im using ACS 4.10
> > > >
> > > > Kind Regards
> > > >
> > > > Benjamin
> > > >
> > > > > Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
> > > > >
> > > > > Hi Rafael,
> > > > >
> > > > > Currently no ssl Backlund works. Also COMODO Certificates don't work.
> > > > >
> > > > > Kind Regards
> > > > >
> > > > > Benjamin
> > > > >
> > > > > Von meinem Huawei-Mobiltelefon gesendet
> > > > >
> > > > > -------- Originalnachricht --------
> > > > > Betreff: Re: https Repo links don't work
> > > > > Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
> > > > > An: users@cloudstack.apache.org
> > > > > Cc:
> > > > >
> > > > > Probably the let´s encrypt CA is not in your java keystore. You will
> > > > > need to add it.
> > > > >
> > > > > On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
> > > > >
> > > > > > Hi together,
> > > > > >
> > > > > > i have an issue deploying templates with https Repo Links.
> > > > > >
> > > > > > When i create a global template like debian stretch netinstall and the
> > > > > > ISO file is located on a https backlink
> > > > > > (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> > > > > > <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
> > > > > >
> > > > > > the following error occours:
> > > > > >
> > > > > > sun.security.validator.ValidatorException: PKIX path building failed:
> > > > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to
> > > > > > find valid certification path to requested target
> > > > > >
> > > > > > OS: CentOS7
> > > > > >
> > > > > > CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> > > > > > <http://cloudstack.apt-get.eu/centos/7/4.10/>
> > > > > >
> > > > > > Did anyone managed to fix it?
> > > > > >
> > > > > > Kind Regards
> > > > > >
> > > > > > *Benjamin Naber*
> > > > > >
> > > > > > System Administrator
> > > > > >
> > > > > > Telefon: +49 (0)711 761642-445
> > > > > > benjamin.naber@netformic.de
> > > > > >
> > > > > > <https://netformic.de/>
> > > > > >
> > > > > > *NETFORMIC GmbH*
> > > > > > HRB 720729, Amtsgericht Stuttgart
> > > > > > USt-IdNr.: DE814688053
> > > > > > Geschäftsführer: Jens Rilling, Timo Weltner
> > > > > >
> > > > > > *Stuttgart*
> > > > > > Hermannstraße 5A, 70178 Stuttgart
> > > > > > Telefon: +49 (0)711 761642-0, Fax: -26
> > > > > >
> > > > > > *Berlin*
> > > > > > Fanny-Zobel-Straße 11, 12435 Berlin
> > > > > >
> > > > > > Telefon: +49 (0)30 60984747-0, Fax: -9
> > > > > > --
> > > > > >
> > > > > > Rafael Weingärtner
> > > > > > --
> > > > > > Rafael Weingärtner
> > > > > >
> > > > > > ___________________________________________________
> > > > > > Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> > > > > > Mobil: +49 (0) 152.34087809
> > > > > > E-Mail: benjamin.naber@coders-area.de
> > > > > >
> > > > > > ___________________________________________________
> > > > > > Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
>
> --
> Rafael Weingärtner
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
___________________________________________________
Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
Mobil: +49 (0) 152.34087809
E-Mail: benjamin.naber@coders-area.de
___________________________________________________
Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
Re: AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Sudhansu,
ty for the tip ! do you know the default password for the keystore on the secondary storage vm ?
Kind regards
Benjamin
> Sudhansu Sahu <su...@accelerite.com> hat am 17. Oktober 2017 um 06:25 geschrieben:
>
> In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
>
> Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
>
> keytool -importkeystore –srckeystore -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
>
> Thanks
> Sudhansu Sahu
>
> On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br> wrote:
>
> Well, if everything is there, then you should not see this error of
> unable to build the certification path.
>
> Then, it would be a good idea to check which cacerts Java is using.
>
> On 10/16/2017 1:54 PM, Benjamin Naber wrote:
>
> > Hi Rafael,
> >
> > i exported the Keystore to textfile and checked fingerprints.
> >
> > root CAs also in the Keystore.
> >
> > Kind Regards
> >
> > Benjamin
> >
> > > Rafael Weingärtner <ra...@autonomiccs.com.br> hat am 16. Oktober 2017 um 17:45 geschrieben:
> > >
> > > How did you check the certificates? Did you list and checked by name? Or
> > > by fingerprint?
> > >
> > > Also, did you check if the root CA was there as well? For instance, the
> > > Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> > > encrypt CA's certificate)
> > >
> > > On 10/16/2017 1:42 PM, Benjamin Naber wrote:
> > >
> > > > Hi Rafael,
> > > >
> > > > ive allready checked the Java Keystore. All Certificates are included.
> > > >
> > > > Im using ACS 4.10
> > > >
> > > > Kind Regards
> > > >
> > > > Benjamin
> > > >
> > > > > Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
> > > > >
> > > > > Hi Rafael,
> > > > >
> > > > > Currently no ssl Backlund works. Also COMODO Certificates don't work.
> > > > >
> > > > > Kind Regards
> > > > >
> > > > > Benjamin
> > > > >
> > > > > Von meinem Huawei-Mobiltelefon gesendet
> > > > >
> > > > > -------- Originalnachricht --------
> > > > > Betreff: Re: https Repo links don't work
> > > > > Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
> > > > > An: users@cloudstack.apache.org
> > > > > Cc:
> > > > >
> > > > > Probably the let´s encrypt CA is not in your java keystore. You will
> > > > > need to add it.
> > > > >
> > > > > On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
> > > > >
> > > > > > Hi together,
> > > > > >
> > > > > > i have an issue deploying templates with https Repo Links.
> > > > > >
> > > > > > When i create a global template like debian stretch netinstall and the
> > > > > > ISO file is located on a https backlink
> > > > > > (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> > > > > > <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
> > > > > >
> > > > > > the following error occours:
> > > > > >
> > > > > > sun.security.validator.ValidatorException: PKIX path building failed:
> > > > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to
> > > > > > find valid certification path to requested target
> > > > > >
> > > > > > OS: CentOS7
> > > > > >
> > > > > > CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> > > > > > <http://cloudstack.apt-get.eu/centos/7/4.10/>
> > > > > >
> > > > > > Did anyone managed to fix it?
> > > > > >
> > > > > > Kind Regards
> > > > > >
> > > > > > *Benjamin Naber*
> > > > > >
> > > > > > System Administrator
> > > > > >
> > > > > > Telefon: +49 (0)711 761642-445
> > > > > > benjamin.naber@netformic.de
> > > > > >
> > > > > > <https://netformic.de/>
> > > > > >
> > > > > > *NETFORMIC GmbH*
> > > > > > HRB 720729, Amtsgericht Stuttgart
> > > > > > USt-IdNr.: DE814688053
> > > > > > Geschäftsführer: Jens Rilling, Timo Weltner
> > > > > >
> > > > > > *Stuttgart*
> > > > > > Hermannstraße 5A, 70178 Stuttgart
> > > > > > Telefon: +49 (0)711 761642-0, Fax: -26
> > > > > >
> > > > > > *Berlin*
> > > > > > Fanny-Zobel-Straße 11, 12435 Berlin
> > > > > >
> > > > > > Telefon: +49 (0)30 60984747-0, Fax: -9
> > > > > > --
> > > > > >
> > > > > > Rafael Weingärtner
> > > > > > --
> > > > > > Rafael Weingärtner
> > > > > >
> > > > > > ___________________________________________________
> > > > > > Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> > > > > > Mobil: +49 (0) 152.34087809
> > > > > > E-Mail: benjamin.naber@coders-area.de
> > > > > >
> > > > > > ___________________________________________________
> > > > > > Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
>
> --
> Rafael Weingärtner
>
> DISCLAIMER
> ==========
> This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
___________________________________________________
Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
Mobil: +49 (0) 152.34087809
E-Mail: benjamin.naber@coders-area.de
___________________________________________________
Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
Re: AW:https Repo links don't work
Posted by Sudhansu Sahu <su...@accelerite.com>.
In SSVM default java keystore is overriden by "realhostip.keystore" and does not have necessary certificates.
Import all java cacerts to ‘/usr/local/cloud/systemvm/certs/realhostip.keystore’.
keytool -importkeystore –srckeystore <java cacerts path> -destkeystore /usr/local/cloud/systemvm/certs/realhostip.keystore
Thanks
Sudhansu Sahu
On 10/16/17, 9:25 PM, "Rafael Weingärtner" <ra...@autonomiccs.com.br> wrote:
Well, if everything is there, then you should not see this error of
unable to build the certification path.
Then, it would be a good idea to check which cacerts Java is using.
On 10/16/2017 1:54 PM, Benjamin Naber wrote:
> Hi Rafael,
>
> i exported the Keystore to textfile and checked fingerprints.
>
> root CAs also in the Keystore.
>
> Kind Regards
>
> Benjamin
>
>> Rafael Weingärtner <ra...@autonomiccs.com.br> hat am 16. Oktober 2017 um 17:45 geschrieben:
>>
>> How did you check the certificates? Did you list and checked by name? Or
>> by fingerprint?
>>
>> Also, did you check if the root CA was there as well? For instance, the
>> Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
>> encrypt CA's certificate)
>>
>> On 10/16/2017 1:42 PM, Benjamin Naber wrote:
>>
>>> Hi Rafael,
>>>
>>> ive allready checked the Java Keystore. All Certificates are included.
>>>
>>> Im using ACS 4.10
>>>
>>> Kind Regards
>>>
>>> Benjamin
>>>
>>>> Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
>>>>
>>>> Hi Rafael,
>>>>
>>>> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>>>>
>>>> Kind Regards
>>>>
>>>> Benjamin
>>>>
>>>> Von meinem Huawei-Mobiltelefon gesendet
>>>>
>>>> -------- Originalnachricht --------
>>>> Betreff: Re: https Repo links don't work
>>>> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
>>>> An: users@cloudstack.apache.org
>>>> Cc:
>>>>
>>>> Probably the let´s encrypt CA is not in your java keystore. You will
>>>> need to add it.
>>>>
>>>> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>>>>
>>>>> Hi together,
>>>>>
>>>>> i have an issue deploying templates with https Repo Links.
>>>>>
>>>>> When i create a global template like debian stretch netinstall and the
>>>>> ISO file is located on a https backlink
>>>>> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
>>>>> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>>>>>
>>>>> the following error occours:
>>>>>
>>>>> sun.security.validator.ValidatorException: PKIX path building failed:
>>>>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>>>>> find valid certification path to requested target
>>>>>
>>>>> OS: CentOS7
>>>>>
>>>>> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
>>>>> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>>>>>
>>>>> Did anyone managed to fix it?
>>>>>
>>>>> Kind Regards
>>>>>
>>>>> *Benjamin Naber*
>>>>>
>>>>> System Administrator
>>>>>
>>>>> Telefon: +49 (0)711 761642-445
>>>>> benjamin.naber@netformic.de
>>>>>
>>>>> <https://netformic.de/>
>>>>>
>>>>> *NETFORMIC GmbH*
>>>>> HRB 720729, Amtsgericht Stuttgart
>>>>> USt-IdNr.: DE814688053
>>>>> Geschäftsführer: Jens Rilling, Timo Weltner
>>>>>
>>>>> *Stuttgart*
>>>>> Hermannstraße 5A, 70178 Stuttgart
>>>>> Telefon: +49 (0)711 761642-0, Fax: -26
>>>>>
>>>>> *Berlin*
>>>>> Fanny-Zobel-Straße 11, 12435 Berlin
>>>>>
>>>>> Telefon: +49 (0)30 60984747-0, Fax: -9
>>>>> --
>>>>> Rafael Weingärtner
>> --
>> Rafael Weingärtner
> ___________________________________________________
> Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> Mobil: +49 (0) 152.34087809
> E-Mail: benjamin.naber@coders-area.de
> ___________________________________________________
> Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
--
Rafael Weingärtner
DISCLAIMER
==========
This e-mail may contain privileged and confidential information which is the property of Accelerite, a Persistent Systems business. It is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorized to read, retain, copy, print, distribute or use this message. If you have received this communication in error, please notify the sender and delete all copies of this message. Accelerite, a Persistent Systems business does not accept any liability for virus infected mails.
Re: AW:https Repo links don't work
Posted by Rafael Weingärtner <ra...@autonomiccs.com.br>.
Well, if everything is there, then you should not see this error of
unable to build the certification path.
Then, it would be a good idea to check which cacerts Java is using.
On 10/16/2017 1:54 PM, Benjamin Naber wrote:
> Hi Rafael,
>
> i exported the Keystore to textfile and checked fingerprints.
>
> root CAs also in the Keystore.
>
> Kind Regards
>
> Benjamin
>
>> Rafael Weingärtner <ra...@autonomiccs.com.br> hat am 16. Oktober 2017 um 17:45 geschrieben:
>>
>> How did you check the certificates? Did you list and checked by name? Or
>> by fingerprint?
>>
>> Also, did you check if the root CA was there as well? For instance, the
>> Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
>> encrypt CA's certificate)
>>
>> On 10/16/2017 1:42 PM, Benjamin Naber wrote:
>>
>>> Hi Rafael,
>>>
>>> ive allready checked the Java Keystore. All Certificates are included.
>>>
>>> Im using ACS 4.10
>>>
>>> Kind Regards
>>>
>>> Benjamin
>>>
>>>> Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
>>>>
>>>> Hi Rafael,
>>>>
>>>> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>>>>
>>>> Kind Regards
>>>>
>>>> Benjamin
>>>>
>>>> Von meinem Huawei-Mobiltelefon gesendet
>>>>
>>>> -------- Originalnachricht --------
>>>> Betreff: Re: https Repo links don't work
>>>> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
>>>> An: users@cloudstack.apache.org
>>>> Cc:
>>>>
>>>> Probably the let´s encrypt CA is not in your java keystore. You will
>>>> need to add it.
>>>>
>>>> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>>>>
>>>>> Hi together,
>>>>>
>>>>> i have an issue deploying templates with https Repo Links.
>>>>>
>>>>> When i create a global template like debian stretch netinstall and the
>>>>> ISO file is located on a https backlink
>>>>> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
>>>>> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>>>>>
>>>>> the following error occours:
>>>>>
>>>>> sun.security.validator.ValidatorException: PKIX path building failed:
>>>>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>>>>> find valid certification path to requested target
>>>>>
>>>>> OS: CentOS7
>>>>>
>>>>> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
>>>>> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>>>>>
>>>>> Did anyone managed to fix it?
>>>>>
>>>>> Kind Regards
>>>>>
>>>>> *Benjamin Naber*
>>>>>
>>>>> System Administrator
>>>>>
>>>>> Telefon: +49 (0)711 761642-445
>>>>> benjamin.naber@netformic.de
>>>>>
>>>>> <https://netformic.de/>
>>>>>
>>>>> *NETFORMIC GmbH*
>>>>> HRB 720729, Amtsgericht Stuttgart
>>>>> USt-IdNr.: DE814688053
>>>>> Geschäftsführer: Jens Rilling, Timo Weltner
>>>>>
>>>>> *Stuttgart*
>>>>> Hermannstraße 5A, 70178 Stuttgart
>>>>> Telefon: +49 (0)711 761642-0, Fax: -26
>>>>>
>>>>> *Berlin*
>>>>> Fanny-Zobel-Straße 11, 12435 Berlin
>>>>>
>>>>> Telefon: +49 (0)30 60984747-0, Fax: -9
>>>>> --
>>>>> Rafael Weingärtner
>> --
>> Rafael Weingärtner
> ___________________________________________________
> Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
> Mobil: +49 (0) 152.34087809
> E-Mail: benjamin.naber@coders-area.de
> ___________________________________________________
> Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
--
Rafael Weingärtner
Re: AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Rafael,
i exported the Keystore to textfile and checked fingerprints.
root CAs also in the Keystore.
Kind Regards
Benjamin
> Rafael Weingärtner <ra...@autonomiccs.com.br> hat am 16. Oktober 2017 um 17:45 geschrieben:
>
> How did you check the certificates? Did you list and checked by name? Or
> by fingerprint?
>
> Also, did you check if the root CA was there as well? For instance, the
> Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
> encrypt CA's certificate)
>
> On 10/16/2017 1:42 PM, Benjamin Naber wrote:
>
> > Hi Rafael,
> >
> > ive allready checked the Java Keystore. All Certificates are included.
> >
> > Im using ACS 4.10
> >
> > Kind Regards
> >
> > Benjamin
> >
> > > Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
> > >
> > > Hi Rafael,
> > >
> > > Currently no ssl Backlund works. Also COMODO Certificates don't work.
> > >
> > > Kind Regards
> > >
> > > Benjamin
> > >
> > > Von meinem Huawei-Mobiltelefon gesendet
> > >
> > > -------- Originalnachricht --------
> > > Betreff: Re: https Repo links don't work
> > > Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
> > > An: users@cloudstack.apache.org
> > > Cc:
> > >
> > > Probably the let´s encrypt CA is not in your java keystore. You will
> > > need to add it.
> > >
> > > On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
> > >
> > > > Hi together,
> > > >
> > > > i have an issue deploying templates with https Repo Links.
> > > >
> > > > When i create a global template like debian stretch netinstall and the
> > > > ISO file is located on a https backlink
> > > > (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> > > > <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
> > > >
> > > > the following error occours:
> > > >
> > > > sun.security.validator.ValidatorException: PKIX path building failed:
> > > > sun.security.provider.certpath.SunCertPathBuilderException: unable to
> > > > find valid certification path to requested target
> > > >
> > > > OS: CentOS7
> > > >
> > > > CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> > > > <http://cloudstack.apt-get.eu/centos/7/4.10/>
> > > >
> > > > Did anyone managed to fix it?
> > > >
> > > > Kind Regards
> > > >
> > > > *Benjamin Naber*
> > > >
> > > > System Administrator
> > > >
> > > > Telefon: +49 (0)711 761642-445
> > > > benjamin.naber@netformic.de
> > > >
> > > > <https://netformic.de/>
> > > >
> > > > *NETFORMIC GmbH*
> > > > HRB 720729, Amtsgericht Stuttgart
> > > > USt-IdNr.: DE814688053
> > > > Geschäftsführer: Jens Rilling, Timo Weltner
> > > >
> > > > *Stuttgart*
> > > > Hermannstraße 5A, 70178 Stuttgart
> > > > Telefon: +49 (0)711 761642-0, Fax: -26
> > > >
> > > > *Berlin*
> > > > Fanny-Zobel-Straße 11, 12435 Berlin
> > > >
> > > > Telefon: +49 (0)30 60984747-0, Fax: -9
> > > > --
> > > > Rafael Weingärtner
>
> --
> Rafael Weingärtner
___________________________________________________
Benjamin Naber • Holzstraße 7 • D-73650 Winterbach
Mobil: +49 (0) 152.34087809
E-Mail: benjamin.naber@coders-area.de
___________________________________________________
Diese E-mail einschließlich eventuell angehängter Dateien enthält vertrauliche und / oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind und diese E-mail irrtümlich erhalten haben, dürfen Sie weder den Inhalt dieser E-mail nutzen noch dürfen Sie die eventuell angehängten Dateien öffnen und auch keine Kopie fertigen oder den Inhalt weitergeben / verbreiten. Bitte verständigen Sie den Absender und löschen Sie diese E-mail und eventuell angehängte Dateien umgehend.
Re: AW:https Repo links don't work
Posted by Rafael Weingärtner <ra...@autonomiccs.com.br>.
How did you check the certificates? Did you list and checked by name? Or
by fingerprint?
Also, did you check if the root CA was there as well? For instance, the
Let's encrypt root CA is "DST Root CA X3" (the CA that signs let's
encrypt CA's certificate)
On 10/16/2017 1:42 PM, Benjamin Naber wrote:
> Hi Rafael,
>
> ive allready checked the Java Keystore. All Certificates are included.
>
> Im using ACS 4.10
>
> Kind Regards
>
> Benjamin
>
>> Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
>>
>> Hi Rafael,
>>
>> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>>
>> Kind Regards
>>
>> Benjamin
>>
>> Von meinem Huawei-Mobiltelefon gesendet
>>
>> -------- Originalnachricht --------
>> Betreff: Re: https Repo links don't work
>> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
>> An: users@cloudstack.apache.org
>> Cc:
>>
>> Probably the let´s encrypt CA is not in your java keystore. You will
>> need to add it.
>>
>> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>>> Hi together,
>>>
>>> i have an issue deploying templates with https Repo Links.
>>>
>>> When i create a global template like debian stretch netinstall and the
>>> ISO file is located on a https backlink
>>> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
>>> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>>>
>>> the following error occours:
>>>
>>> sun.security.validator.ValidatorException: PKIX path building failed:
>>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>>> find valid certification path to requested target
>>>
>>> OS: CentOS7
>>>
>>> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
>>> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>>>
>>> Did anyone managed to fix it?
>>>
>>> Kind Regards
>>>
>>> *Benjamin Naber*
>>>
>>> System Administrator
>>>
>>> Telefon: +49 (0)711 761642-445
>>> benjamin.naber@netformic.de
>>>
>>> <https://netformic.de/>
>>>
>>> *NETFORMIC GmbH*
>>> HRB 720729, Amtsgericht Stuttgart
>>> USt-IdNr.: DE814688053
>>> Geschäftsführer: Jens Rilling, Timo Weltner
>>>
>>> *Stuttgart*
>>> Hermannstraße 5A, 70178 Stuttgart
>>> Telefon: +49 (0)711 761642-0, Fax: -26
>>>
>>> *Berlin*
>>> Fanny-Zobel-Straße 11, 12435 Berlin
>>> Telefon: +49 (0)30 60984747-0, Fax: -9
>> --
>> Rafael Weingärtner
--
Rafael Weingärtner
Re: AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Rafael,
ive allready checked the Java Keystore. All Certificates are included.
Im using ACS 4.10
Kind Regards
Benjamin
> Benjamin Naber <be...@coders-area.de> hat am 16. Oktober 2017 um 17:26 geschrieben:
>
> Hi Rafael,
>
> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>
> Kind Regards
>
> Benjamin
>
> Von meinem Huawei-Mobiltelefon gesendet
>
> -------- Originalnachricht --------
> Betreff: Re: https Repo links don't work
> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
> An: users@cloudstack.apache.org
> Cc:
>
> Probably the let´s encrypt CA is not in your java keystore. You will
> need to add it.
>
> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
> >
>
> > Hi together,
> >
> > i have an issue deploying templates with https Repo Links.
> >
> > When i create a global template like debian stretch netinstall and the
> > ISO file is located on a https backlink
> > (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> > <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
> >
> > the following error occours:
> >
> > sun.security.validator.ValidatorException: PKIX path building failed:
> > sun.security.provider.certpath.SunCertPathBuilderException: unable to
> > find valid certification path to requested target
> >
> > OS: CentOS7
> >
> > CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> > <http://cloudstack.apt-get.eu/centos/7/4.10/>
> >
> > Did anyone managed to fix it?
> >
> > Kind Regards
> >
> > *Benjamin Naber*
> >
> > System Administrator
> >
> > Telefon: +49 (0)711 761642-445
> > benjamin.naber@netformic.de
> >
> > <https://netformic.de/>
> >
> > *NETFORMIC GmbH*
> > HRB 720729, Amtsgericht Stuttgart
> > USt-IdNr.: DE814688053
> > Geschäftsführer: Jens Rilling, Timo Weltner
> >
> > *Stuttgart*
> > Hermannstraße 5A, 70178 Stuttgart
> > Telefon: +49 (0)711 761642-0, Fax: -26
> >
> > *Berlin*
> > Fanny-Zobel-Straße 11, 12435 Berlin
> > Telefon: +49 (0)30 60984747-0, Fax: -9
>
> --
> Rafael Weingärtner
Re: AW:https Repo links don't work
Posted by Rafael Weingärtner <ra...@autonomiccs.com.br>.
Well, to solve this is the same as to solve the let´encrypt problem.
You will need to add these CAs in the keystore of trusted certificates.
These are probably new CAs that do not exist in the default cacerts of
Java 7 (I am supposing you are using ACS 4.9 or lower which uses Java 7)
On 10/16/2017 1:26 PM, Benjamin Naber wrote:
> Hi Rafael,
>
> Currently no ssl Backlund works. Also COMODO Certificates don't work.
>
> Kind Regards
>
> Benjamin
>
> Von meinem Huawei-Mobiltelefon gesendet
>
> -------- Originalnachricht --------
> Betreff: Re: https Repo links don't work
> Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
> An: users@cloudstack.apache.org
> Cc:
>
>
> Probably the let´s encrypt CA is not in your java keystore. You will
> need to add it.
>
>
> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>> Hi together,
>>
>> i have an issue deploying templates with https Repo Links.
>>
>> When i create a global template like debian stretch netinstall and the
>> ISO file is located on a https backlink
>> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
>> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>>
>> the following error occours:
>>
>> sun.security.validator.ValidatorException: PKIX path building failed:
>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>> find valid certification path to requested target
>>
>> OS: CentOS7
>>
>> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
>> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>>
>> Did anyone managed to fix it?
>>
>> Kind Regards
>>
>> *Benjamin Naber*
>>
>> System Administrator
>>
>> Telefon: +49 (0)711 761642-445
>> benjamin.naber@netformic.de
>>
>> <https://netformic.de/>
>>
>> *NETFORMIC GmbH*
>> HRB 720729, Amtsgericht Stuttgart
>> USt-IdNr.: DE814688053
>> Geschäftsführer: Jens Rilling, Timo Weltner
>>
>> *Stuttgart*
>> Hermannstraße 5A, 70178 Stuttgart
>> Telefon: +49 (0)711 761642-0, Fax: -26
>>
>> *Berlin*
>> Fanny-Zobel-Straße 11, 12435 Berlin
>> Telefon: +49 (0)30 60984747-0, Fax: -9
>>
>>
--
Rafael Weingärtner
AW:https Repo links don't work
Posted by Benjamin Naber <be...@coders-area.de>.
Hi Rafael,
Currently no ssl Backlund works. Also COMODO Certificates don't work.
Kind Regards
Benjamin
Von meinem Huawei-Mobiltelefon gesendet
-------- Originalnachricht --------
Betreff: Re: https Repo links don't work
Von: Rafael Weingärtner <ra...@autonomiccs.com.br>
An: users@cloudstack.apache.org
Cc:
Probably the let´s encrypt CA is not in your java keystore. You will
need to add it.
On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>
> Hi together,
>
> i have an issue deploying templates with https Repo Links.
>
> When i create a global template like debian stretch netinstall and the
> ISO file is located on a https backlink
> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>
> the following error occours:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
>
> OS: CentOS7
>
> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>
> Did anyone managed to fix it?
>
> Kind Regards
>
> *Benjamin Naber*
>
> System Administrator
>
> Telefon: +49 (0)711 761642-445
> benjamin.naber@netformic.de
>
> <https://netformic.de/>
>
> *NETFORMIC GmbH*
> HRB 720729, Amtsgericht Stuttgart
> USt-IdNr.: DE814688053
> Geschäftsführer: Jens Rilling, Timo Weltner
>
> *Stuttgart*
> Hermannstraße 5A, 70178 Stuttgart
> Telefon: +49 (0)711 761642-0, Fax: -26
>
> *Berlin*
> Fanny-Zobel-Straße 11, 12435 Berlin
> Telefon: +49 (0)30 60984747-0, Fax: -9
>
>
--
Rafael Weingärtner
Re: https Repo links don't work
Posted by Rafael Weingärtner <ra...@autonomiccs.com.br>.
When I said keystore, I meant the keystore used to store keys of CAs you
trust.
I believe ACS uses the default of Java (cacerts)
On 10/16/2017 1:16 PM, Rafael Weingärtner wrote:
> Probably the let´s encrypt CA is not in your java keystore. You will
> need to add it.
>
>
> On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>>
>> Hi together,
>>
>> i have an issue deploying templates with https Repo Links.
>>
>> When i create a global template like debian stretch netinstall and
>> the ISO file is located on a https backlink
>> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
>> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>>
>>
>> the following error occours:
>>
>> sun.security.validator.ValidatorException: PKIX path building failed:
>> sun.security.provider.certpath.SunCertPathBuilderException: unable to
>> find valid certification path to requested target
>>
>> OS: CentOS7
>>
>> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
>> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>>
>> Did anyone managed to fix it?
>>
>> Kind Regards
>>
>> *Benjamin Naber*
>>
>> System Administrator
>>
>> Telefon: +49 (0)711 761642-445
>> benjamin.naber@netformic.de
>>
>> <https://netformic.de/>
>>
>> *NETFORMIC GmbH*
>> HRB 720729, Amtsgericht Stuttgart
>> USt-IdNr.: DE814688053
>> Geschäftsführer: Jens Rilling, Timo Weltner
>>
>> *Stuttgart*
>> Hermannstraße 5A, 70178 Stuttgart
>> Telefon: +49 (0)711 761642-0, Fax: -26
>>
>> *Berlin*
>> Fanny-Zobel-Straße 11, 12435 Berlin
>> Telefon: +49 (0)30 60984747-0, Fax: -9
>>
>>
>
--
Rafael Weingärtner
Re: https Repo links don't work
Posted by Rafael Weingärtner <ra...@autonomiccs.com.br>.
Probably the let´s encrypt CA is not in your java keystore. You will
need to add it.
On 10/16/2017 1:13 PM, Benjamin Naber - NETFORMIC GmbH wrote:
>
> Hi together,
>
> i have an issue deploying templates with https Repo Links.
>
> When i create a global template like debian stretch netinstall and the
> ISO file is located on a https backlink
> (https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso)
> <https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-9.2.1-amd64-netinst.iso%29>.
>
> the following error occours:
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
>
> OS: CentOS7
>
> CS Version: 4.10 from http://cloudstack.apt-get.eu/centos/7/4.10/
> <http://cloudstack.apt-get.eu/centos/7/4.10/>
>
> Did anyone managed to fix it?
>
> Kind Regards
>
> *Benjamin Naber*
>
> System Administrator
>
> Telefon: +49 (0)711 761642-445
> benjamin.naber@netformic.de
>
> <https://netformic.de/>
>
> *NETFORMIC GmbH*
> HRB 720729, Amtsgericht Stuttgart
> USt-IdNr.: DE814688053
> Geschäftsführer: Jens Rilling, Timo Weltner
>
> *Stuttgart*
> Hermannstraße 5A, 70178 Stuttgart
> Telefon: +49 (0)711 761642-0, Fax: -26
>
> *Berlin*
> Fanny-Zobel-Straße 11, 12435 Berlin
> Telefon: +49 (0)30 60984747-0, Fax: -9
>
>
--
Rafael Weingärtner