Re: [VOTE] Apache CloudStack 4.11.2.0 RC2

[Boris Stoyanov]

Thanks Rene, that worked! 

We have a  +1 then. 

Bobby.


boris.stoya...@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 

> On 28 Sep 2018, at 11:38, Rene Moser  wrote:
> 
> Hi
> 
> On 09/28/2018 05:21 PM, Boris Stoyanov wrote:
>> Hi guys,
>> 
>> I’ve did some upgrade testing of RC2. I did upgraded database successfully 
>> from 4.5.2.2, 4.9.3 and 4.11.1, but unfortunately I’ve run into a 
>> connectivity issue between vmware 4.5u3 environments. 
>> 
>> Looks like TLS1.2 is not supported at first glance.
>> 
>>  Caused by: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but 
>> that protocol version is not enabled or not supported by the client.
> 
>> I’m guessing we’ll need an RC3. 
> 
> This is a known issue and also exists in 4.11 (upgrade from 4.5 to 4.11.1)
> 
> Probably only needs some docs:
> 
> in /etc/cloudstack/management/java.security.ciphers
> 
> change line
> 
> jdk.tls.disabledAlgorithms=SSLv2Hello, SSLv3, TLSv1, TLSv1.1, DH keySize
> < 128, RSA keySize < 128, DES keySize < 128, SHA1 keySize < 128, MD5
> keySize < 128, RC4
> 
> to
> 
> jdk.tls.disabledAlgorithms=SSLv2Hello, SSLv3, DH keySize < 128, RSA
> keySize < 128, DES keySize < 128, SHA1 keySize < 128, MD5 keySize < 128, RC4
> 
> solves it.
> 
> Regards
> René

Re: [VOTE] Apache CloudStack 4.11.2.0 RC2

[Rene Moser]

Hi

On 09/28/2018 05:21 PM, Boris Stoyanov wrote:
> Hi guys,
> 
> I’ve did some upgrade testing of RC2. I did upgraded database successfully 
> from 4.5.2.2, 4.9.3 and 4.11.1, but unfortunately I’ve run into a 
> connectivity issue between vmware 4.5u3 environments. 
> 
> Looks like TLS1.2 is not supported at first glance.
> 
>   Caused by: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but 
> that protocol version is not enabled or not supported by the client.

> I’m guessing we’ll need an RC3. 

This is a known issue and also exists in 4.11 (upgrade from 4.5 to 4.11.1)

Probably only needs some docs:

in /etc/cloudstack/management/java.security.ciphers

change line

jdk.tls.disabledAlgorithms=SSLv2Hello, SSLv3, TLSv1, TLSv1.1, DH keySize
< 128, RSA keySize < 128, DES keySize < 128, SHA1 keySize < 128, MD5
keySize < 128, RC4

to

jdk.tls.disabledAlgorithms=SSLv2Hello, SSLv3, DH keySize < 128, RSA
keySize < 128, DES keySize < 128, SHA1 keySize < 128, MD5 keySize < 128, RC4

solves it.

Regards
René

Re: [VOTE] Apache CloudStack 4.11.2.0 RC2

[Boris Stoyanov]

Hi guys,

I’ve did some upgrade testing of RC2. I did upgraded database successfully from 
4.5.2.2, 4.9.3 and 4.11.1, but unfortunately I’ve run into a connectivity issue 
between vmware 4.5u3 environments. 

Looks like TLS1.2 is not supported at first glance.

Caused by: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but 
that protocol version is not enabled or not supported by the client.

I’m guessing we’ll need an RC3. 

Bobby.


boris.stoya...@shapeblue.com 
www.shapeblue.com
Amadeus House, Floral Street, London  WC2E 9DPUK
@shapeblue
  
 

> On 26 Sep 2018, at 23:06, Paul Angus  wrote:
> 
> Hi All,
> 
> There were a few issues discovered in RC1, these have been fixed so we're 
> ready to go with RC2 which should hopefully go very smoothly.
> 
> I've created a 4.11.2.0 release (RC2), with the following artefacts up for 
> testing and a vote:
> 
> Git Branch and Commit SH:
> https://gitbox.apache.org/repos/asf?p=cloudstack.git;a=shortlog;h=refs/heads/
> Commit: c64591bdd2fd677c9a0ca1970d61d1be9f222326
> 
> Source release (checksums and signatures are available at the same location):
> https://dist.apache.org/repos/dist/dev/cloudstack/4.11.2.0/
> 
> PGP release keys (signed using 8B309F7251EE0BC8):
> https://dist.apache.org/repos/dist/release/cloudstack/KEYS
> 
> The vote will be open until the middle of next week, 26th September 2018.
> 
> For sanity in tallying the vote, can PMC members please be sure to indicate 
> "(binding)" with their vote
> 
> [ ] +1 approve
> [ ] +0 no opinion
> [ ] -1 disapprove (and reason why)
> 
> Additional information:
> 
> For users' convenience, I've built packages from 
> c64591bdd2fd677c9a0ca1970d61d1be9f222326 and published RC2 repository here:
> http://packages.shapeblue.com/testing/41120rc2/
> 
> 4.11.2 systemvm templates are available from here:
> http://packages.shapeblue.com/testing/systemvm/
> 
> 
> 
> 
> 
> paul.an...@shapeblue.com 
> www.shapeblue.com
> Amadeus House, Floral Street, London  WC2E 9DPUK
> @shapeblue
> 
> 
>