Hi

aai certificate expired on the 27th of September
and VID will expire and the 3rd of October

In El Alto the certificates renewal was a bit painful, the mechanism has been 
updated and simplified  since frankfurt
As we are lacking resources (focusing on Guilin right now), we do not plan to 
release a new El Alto release to update the certificates.
So the best solution will be to update to Frankfurt at this stage.

/Morgan


Le lundi 28 septembre 2020 à 01:14 -0700, Gülsüm Atıcı a écrit :
Dear  All,
We are using El Alto, downloaded the helm charts with elalto tag  and  deployed 
3 days ago.
We are trying the  vLB VNF scale out demo and  following the  guide  
https://docs.onap.org/en/elalto/submodules/integration.git/docs/docs_scaleout.html.
  After step 1.4,before starting
1-5 Creating a VNF Template with CDT,  we  would like  browse the SDC service 
models from VID UI and meet below error.  When we check the debug logs of VID, 
It gives the certificate error while  reaching to AAI as shown below:

Could  you please help us to  fix the error ?
Thanks,
Gulsum

2020-09-28T08:02:50.129Z [https-openssl-nio-8443-exec-6] DEBUG 
com.att.eelf.debug 
org.onap.vid.controller.VidControllergetServicesAuditLogBeginTimestamp=2020-09-28T08:02:49.923Z
 InstanceUUID=null 
org.onap.vid.controller.VidControllergetServicesMetricsLogBeginTimestamp=2020-09-28T08:02:49.923Z
 RequestId=24ca2ff9-b933-42e5-837d-5e94af6aa054 LoginId=demo 
AlertSeverity=INFORMATIONAL PROTOCOL=HTTPS PartnerName=Default_FE 
ServerFQDN=dev-vid-vid-784d4cdd46-57n8x ClientIPAddress=10.42.0.0 
Full-URL=https://vid.api.simpledemo.onap.org:30200/vid/rest/models/services?distributionStatus=DISTRIBUTED
 TargetEntity=Default_BE ServiceInstanceId= ServerIPAddress=10.42.1.154 
ServiceName=/rest/models/services TargetServiceName=getServices 
ClassName=org.onap.vid.aai.util.AAIRestInterface RestGET, 
url=https://aai.onap:8443/aai/v13/business/customers?subscriber-type=INFRA&depth=0,
 Exception: javax.ws.rs.ProcessingException: 
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: 
PKIX path validation failed: java.security.cert.CertPathValidatorException: 
validity check failed
2020-09-28T08:02:50.154Z [https-openssl-nio-8443-exec-6] DEBUG 
com.att.eelf.debug 
org.onap.vid.controller.VidControllergetServicesAuditLogBeginTimestamp=2020-09-28T08:02:49.923Z
 InstanceUUID=null 
org.onap.vid.controller.VidControllergetServicesMetricsLogBeginTimestamp=2020-09-28T08:02:49.923Z
 RequestId=24ca2ff9-b933-42e5-837d-5e94af6aa054 LoginId=demo 
AlertSeverity=INFORMATIONAL PROTOCOL=HTTPS PartnerName=Default_FE 
ServerFQDN=dev-vid-vid-784d4cdd46-57n8x ClientIPAddress=10.42.0.0 
Full-URL=https://vid.api.simpledemo.onap.org:30200/vid/rest/models/services?distributionStatus=DISTRIBUTED
 TargetEntity=Default_BE ServiceInstanceId= ServerIPAddress=10.42.1.154 
ServiceName=/rest/models/services TargetServiceName=getServices 
ClassName=org.onap.vid.aai.util.AAIRestInterface RestPUT, 
url=https://aai.onap:8443/aai/v13/query?format=resource, Exception: 
javax.ws.rs.ProcessingException: javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path validation failed: 
java.security.cert.CertPathValidatorException: validity check failed
2020-09-28T08:02:54.359Z [https-openssl-nio-8443-exec-1] DEBUG 
com.att.eelf.debug InstanceUUID=null 
RequestId=8a4f6c7b-e2b1-4329-a373-542164fdb10d LoginId=demo 
AlertSeverity=INFORMATIONAL PROTOCOL=HTTPS PartnerName=Default_FE 
ServerFQDN=dev-vid-vid-784d4cdd46-57n8x ClientIPAddress=10.42.0.0 
Full-URL=https://vid.api.simpledemo.onap.org:30200/vid/error-report 
ServiceInstanceId= ServerIPAddress=10.42.1.154 ServiceName=/error-report 
ClassName=org.onap.vid.aai.util.AAIRestInterface RestGET, 
url=https://aai.onap:8443/aai/v13/business/customers?subscriber-type=INFRA&depth=0,
 Exception: javax.ws.rs.ProcessingException: 
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: 
PKIX path validation failed: java.security.cert.CertPathValidatorException: 
validity check failed






VID UI generates below error:

Selected test API:
VNF_API

 Data from GUI:
Failed to get service models from SDC.

 Collected data from API:
{
"X-ECOMP-RequestID": "8a4f6c7b-e2b1-4329-a373-542164fdb10d",
"commitInfo": {
"commitId": "7ece4abc079e754c856c58a2cb91d1d8c04e8651",
"commitMessageShort": "Release vid",
"commitTime": "2019-09-16T08:22:51+0000"
},
"probeInfo": [
{
"component": "SDC",
"available": true,
"metadata": {
"duration": 7,
"description": "SDC healthCheck",
"httpMethod": "GET",
"httpCode": 200,
"url": "https://sdc-be.onap:8443/sdc2/rest/healthCheck";,
"rawData": "{  \"sdcVersion\": \"1.5.3\",  \"siteMode\": \"unknown\",  
\"componentsInfo\": [    {      \"healthCheckComponent\": \"BE\",      
\"healthCheckStatus\": \"UP\",      \"version\": \"1.5.3\",      
\"description\": \"OK\"    },    {      \"healthCheckComponent\": 
\"JANUSGRAPH\",      \"healthCheckStatus\": \"UP\",      \"description\": 
\"OK\"    },    {      \"healthCheckComponent\": \"ES\",      
\"healthCheckStatus\": \"UP\",      \"version\": \"1.5.3\",      
\"description\": \"OK\"    },    {      \"healthCheckComponent\": \"DE\",      
\"healthCheckStatu"
}
},
{
"component": "MSO",
"available": true,
"metadata": {
"duration": 191,
"description": "OK",
"httpMethod": "GET",
"httpCode": 200,
"url": 
"http://so.onap:8080/onap/so/infra/orchestrationRequests/v7?filter=requestExecutionDate:EQUALS:01-01-2100";,
"rawData": "{\"requestList\":[]}"
}
},
{
"component": "SCHEDULER",
"available": false,
"metadata": {
"duration": 1,
"description": "java.lang.IllegalStateException: Required key 
'scheduler.get.schedules' not found"
}
},
{
"component": "AAI",
"available": false,
"metadata": {
"duration": 10,
"description": "javax.ws.rs.ProcessingException: 
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: 
PKIX path validation failed: java.security.cert.CertPathValidatorException: 
validity check failed: java.security.cert.CertificateExpiredException: 
NotAfter: Sun Sep 27 19:34:54 UTC 2020",
"httpMethod": "GET",
"httpCode": 0,
"url": 
"https://aai.onap:8443/aai/v13/business/customers?subscriber-type=INFRA&depth=0";,
"rawData": null
}
},
{
"component": "AAI",
"available": false,
"metadata": {
"duration": 25,
"description": "io.joshworks.restclient.http.exceptions.RestClientException: 
org.apache.http.NoHttpResponseException: aai.onap:8443 failed to respond",
"httpMethod": "GET",
"httpCode": 0,
"url": 
"https://aai.onap:8443/aai/v13/business/customers?subscriber-type=INFRA&depth=0";,
"rawData": ""
}
}
],
"aaiFullSubscriberList": {
"exception": "io.joshworks.restclient.http.exceptions.RestClientException: 
org.apache.http.NoHttpResponseException: aai.onap:8443 failed to respond"
},
"userID": "demo"
}


_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.

This message and its attachments may contain confidential or privileged 
information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete 
this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.
Thank you.



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22194): https://lists.onap.org/g/onap-discuss/message/22194
Mute This Topic: https://lists.onap.org/mt/77170297/21656
Mute #aai:https://lists.onap.org/g/onap-discuss/mutehashtag/aai
Mute #vid:https://lists.onap.org/g/onap-discuss/mutehashtag/vid
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to