Hi,
I've installed sipx v.3.11.12-015003 in HA configuration following this
steps:
1) Installed two servers using Centos v.5.2 minimal installation
2) Installed sipxecs using yum install sipxecs
3) running sipxecs-setup-system to configure server like a Primary server.
4) On primary Server add a secondary server using System -> Server ->
Add Server
5) run sipxecs-setup-system on second server to set Secondary server
Installation seems to goes well, I've successfully restarted service on
Primary server, Secondary server status is registered but process status
of Secondary server are in *"**Undefined ** [Restart Needed] status"*.
When I try to restart secondary servers services, interface shows:*"
**Error performing operations on services from host: tst-sipxs.tstcsi.it."*
Logs on primary server:
* sipxconfig.log*
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)
at
com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:954)
... 21 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target
at
sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174)
at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
at
sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280)
... 27 more
"2009-03-27T11:01:08.290000Z":464:JAVA:INFO:tst-sipxm.tstcsi.it:P1-13:00000000:XmlRpcClientInterceptor:"XML/RPC
ProcMgmtRpc.getStateAll with [tst-sipxm.tstcsi.it] on
https://tst-sipxs.tstcsi.it:8092/RPC2";
*sipxsupervisor.log*
"2009-03-27T12:15:54.622142Z":3272:XMLRPC:INFO:tst-sipxm.tstcsi.it:HttpServer-3:B7C53B90:Supervisor:"XmlRpcDispatch::processRequest
requestBody = \n<?xml version=\"1.0\"
encoding=\"UTF-8\"?>\n<methodCall>\n<methodName>Alarm.raiseAlarm</methodName>\n<params>\n<param>\n<value><string>tst-sipxm.tstcsi.it</string></value>\n</param>\n<param>\n<value><string>PROCESS_RESTARTED</string></value>\n</param>\n<param>\n<value><array><data>\n<value><string>ParkServer</string></value>\n</data></array></value>\n</param>\n</params>\n</methodCall>"
"2009-03-27T12:15:54.623181Z":3273:ALARM:ERR:tst-sipxm.tstcsi.it:HttpServer-3:B7C53B90:Supervisor:"Alarm.raiseAlarm
failed: 'tst-sipxm.tstcsi.it' failed SSL authentication"
"2009-03-27T12:15:54.627921Z":3274:XMLRPC:INFO:tst-sipxm.tstcsi.it:HttpServer-3:B7C53B90:Supervisor:"XmlRpcDispatch::processRequest
method 'Alarm.raiseAlarm' response status=FAILED\n<?xml version=\"1.0\"
encoding=\"UTF-8\"?>\n<methodResponse><!-- Alarm.raiseAlarm
-->\n<fault>\n<value><struct>\n<member>\n<name>faultCode</name><value><int>-4</int></value>\n</member>\n<member>\n<name>faultString</name><value><string>TLS
Peer Authentication
Failure</string></value>\n</member>\n</struct></value>\n</fault>\n</methodResponse>"
"2009-03-27T12:15:54.628276Z":3275:KERNEL:INFO:tst-sipxm.tstcsi.it:HttpServer-3:B7C53B90:Supervisor:"OsSSLConnectionSocket::close"
"2009-03-27T12:15:54.628377Z":3276:KERNEL:INFO:tst-sipxm.tstcsi.it:HttpServer-3:B7C53B90:Supervisor:"OsSSLConnectionSocket::close"
"2009-03-27T12:15:54.628682Z":3277:KERNEL:INFO:tst-sipxm.tstcsi.it:HttpServer-3:B7C53B90:Supervisor:"OsConnectionSocket::~"
"2009-03-27T12:16:03.117965Z":3278:SUPERVISOR:ERR:tst-sipxm.tstcsi.it:SipxProcess-85:B1E7DB90:Supervisor:"SipxProcess[ConfigServer]::commandOutput
'Avoiding obscuring previous error by supressing error encountered while
ending request: org.apache.xmlrpc.XmlRpcClientException: Exception
closing URLConnection'"
"2009-03-27T12:16:05.733743Z":3279:SUPERVISOR:ERR:tst-sipxm.tstcsi.it:SipxProcess-85:B1E7DB90:Supervisor:"SipxProcess[ConfigServer]::commandOutput
'Avoiding obscuring previous error by supressing error encountered while
ending request: org.apache.xmlrpc.XmlRpcClientException: Exception
closing URLConnection'"
Logs on secondary server shows:
*
sipxconfig.log*
"2009-03-27T10:46:52.063000Z":112:JAVA:WARNING:tst-sipxs.tstcsi.it:BackgroundTaskQueue
- WorkerThread:00000000:SipxReplicationContextImpl:"Replication failed:
File replication: autoattendants.xml"
"2009-03-27T12:16:44.021808Z":4803:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsConnectionSocket::~"
"2009-03-27T12:16:44.071522Z":4804:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsConnectionSocket::_[2]
((null), 9)"
"2009-03-27T12:16:44.115420Z":4805:KERNEL:ERR:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsSSLServerSocket
SSL_accept - incompatible client?:\n SSL error: 1
'error:00000001:lib(0):func(0):reason(1)'"
"2009-03-27T12:16:44.116168Z":4806:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsSSLConnectionSocket::close"
"2009-03-27T12:16:44.116810Z":4807:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsConnectionSocket::~"
*
sipxsupervisor.log*
"2009-03-27T12:17:44.413653Z":4833:KERNEL:ERR:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsSSLServerSocket
SSL_accept - incompatible client?:\n SSL error: 1
'error:00000001:lib(0):func(0):reason(1)'"
"2009-03-27T12:17:44.413809Z":4834:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsSSLConnectionSocket::close"
"2009-03-27T12:17:44.414015Z":4835:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsConnectionSocket::~"
"2009-03-27T12:17:44.450543Z":4836:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsConnectionSocket::_[2]
((null), 9)"
"2009-03-27T12:17:44.484215Z":4837:KERNEL:ERR:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsSSLServerSocket
SSL_accept - incompatible client?:\n SSL error: 1
'error:00000001:lib(0):func(0):reason(1)'"
"2009-03-27T12:17:44.484324Z":4838:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsSSLConnectionSocket::close"
"2009-03-27T12:17:44.484362Z":4839:KERNEL:INFO:tst-sipxs.tstcsi.it:HttpServer-3:B7C04B90:Supervisor:"OsConnectionSocket::~"
what's wrong? Is there some procedure to install certificate?
Thanks!
_______________________________________________
sipx-users mailing list
[email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-users
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-users
