TECHZEN Zenoss User Community ARCHIVE  

Alpha 2 X500 certificates expired - all broken

Subject: Alpha 2 X500 certificates expired - all broken
Author: Jane Curry
Posted: 2014-04-08 10:58

Tried using the VM for Alpha2 under VMware.

The outside localhost stays red in the services map.
The logstash GUI http://192.168.10.130:8787/static/logview/#/dashboard/file/logstash.json shows no events.
Logfile for individual services (like zenhub and zenping) are all full of complaints about:

Failed to tls handshake with 172.17.42.1 x509: certificate has expired or is not yet valid

Used openssl x509 -in logstash-forwarder.crt -noout -text and it confirms that the certificate expired March 27th 2014.

Suggest no-one else tries this until a new release is issued - trelane suggested it should be out today (April 8th).

Not so cheers,
Jane

Email: jane.curry@skills-1st.co.uk    Web: https://www.skills-1st.co.uk



Subject: Jane:
Author: Andrew Kirch
Posted: 2014-04-10 11:43

Jane:

We're working on a fix for this now, it should only affect the docker logstash, and not Zenoss itself.

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



Subject: Note: The X509 certifcates
Author: Andrew Kirch
Posted: 2014-04-10 11:49

Note: The X509 certifcates have expired in the appliance and Debian package.
The certificates are required for the central logging feature.

Please follow instructions below on how to install the new certificates:
1. Download logstash-certs.zip (http://sourceforge.net/projects/zenoss/files/zenoss-alpha/builds/europa-...)
2. scp logstash-certs.zip to your alpha 2 deployment
3. Unzip logtash-certs.zip to /opt/serviced/isvcs/resources/logstash
4. Restart serviced via sudo stop serviced/start serviced or reboot
5. Verify Zenoss logs are being indexed by starting Zenoss through the Control Plane and
navigate to http://[HOSTIP]:8787/static/logview/#/dashboard/file/logstash.json

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



Subject: please note that the above
Author: Andrew Kirch
Posted: 2014-04-10 12:01

please note that the above instructions have already been added to the Troubleshooting section for 5.x on the wiki, and any subsequent updates to the instructions will be added there: http://wiki.zenoss.org/Zenoss_Core_5_Alpha/Download#Logstash_Certificate...

Andrew Kirch

akirch@gvit.com

Need Zenoss support, consulting or custom development Look no further. Email or PM me!

Ready for Distributed Topology (collectors) for Zenoss 5 Coming May 1st from GoVanguard



< Previous
Alpha 2 timezone feature
  Next
disabling specific events on specific devices
>