I have fixed this issue by changing this : jdk.tls.disabledAlgorithms=SSLv2Hello, SSLv3, TLSv1, TLSv1.1, DH keySize < 128, RSA keySize < 128, DES keySize < 128, SHA1 keySize < 128, MD5 keySize < 128, RC4 to this -> jdk.tls.enabledAlgorithms=SSLv2Hello, SSLv3, TLSv1, TLSv1.1, DH keySize < 128, RSA keySize < 128, DES keySize < 128, SHA1 keySize < 128, MD5 keySize < 128, RC4
In : /etc/cloudstack/management/java.security.ciphers Regards, Cristian From: cristian.c@istream.today <mailto:cristian.c@istream.today> <cristian.c@istream.today <mailto:cristian.c@istream.today> > Sent: Saturday, August 4, 2018 11:32 AM To: users@cloudstack.apache.org <mailto:users@cloudstack.apache.org> Subject: upgrade CloudStack 4.9.3 to 4.11 - Server chose TLSv1, but that protocol version is not enabled or not supported by the client Hello, I just did an upgrade from 4.9.3 to 4.11.1 ( I use shape blue packages ) and I get this error : 2018-08-04 09:24:30,085 DEBUG [c.c.a.m.ClusteredAgentManagerImpl] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) Loading directly connected host 1(ns30xxxxx.xxxxxx.eu) 2018-08-04 09:24:30,093 DEBUG [c.c.h.v.r.VmwareContextFactory] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) initialize VmwareContext. url: https://cs.xxxxxxx.com/sdk/vimService, username: administrator@vsphere.local <mailto:administrator@vsphere.local> , password: X*************** 2018-08-04 09:24:30,106 ERROR [c.c.h.v.r.VmwareResource] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) Unable to connect to vSphere server: cs.un-real.com com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client. at com.sun.xml.internal.ws.transport.http.client.HttpClientTransport.getOutput( HttpClientTransport.java:117) at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(Http TransportPipe.java:208) at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processReque st(HttpTransportPipe.java:130) at com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(Defer redTransportPipe.java:124) at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Fiber.java:1121) at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Fiber.java:1035) at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Fiber.java:1004) at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Fiber.java:862) at com.sun.xml.internal.ws.client.Stub.process(Stub.java:448) at com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(SEIStub.java:178) at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandle r.java:93) at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandle r.java:77) at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(SEIStub.java:147) at com.sun.proxy.$Proxy450.retrieveServiceContent(Unknown Source) at com.cloud.hypervisor.vmware.util.VmwareClient.connect(VmwareClient.java:152) at com.cloud.hypervisor.vmware.resource.VmwareContextFactory.create(VmwareConte xtFactory.java:70) at com.cloud.hypervisor.vmware.resource.VmwareContextFactory.getContext(VmwareC ontextFactory.java:87) at com.cloud.hypervisor.vmware.resource.VmwareResource.getServiceContext(Vmware Resource.java:5998) at com.cloud.hypervisor.vmware.resource.VmwareResource.getServiceContext(Vmware Resource.java:5964) at com.cloud.hypervisor.vmware.resource.VmwareResource.configure(VmwareResource .java:5856) at com.cloud.hypervisor.vmware.VmwareServerDiscoverer.reloadResource(VmwareServ erDiscoverer.java:742) at com.cloud.agent.manager.AgentManagerImpl.loadDirectlyConnectedHost(AgentMana gerImpl.java:717) at com.cloud.agent.manager.ClusteredAgentManagerImpl.scanDirectAgentToLoad(Clus teredAgentManagerImpl.java:227) at com.cloud.agent.manager.ClusteredAgentManagerImpl.runDirectAgentScanTimerTas k(ClusteredAgentManagerImpl.java:192) at com.cloud.agent.manager.ClusteredAgentManagerImpl.access$100(ClusteredAgentM anagerImpl.java:99) at com.cloud.agent.manager.ClusteredAgentManagerImpl$DirectAgentScanTimerTask.r unInContext(ClusteredAgentManagerImpl.java:243) at org.apache.cloudstack.managed.context.ManagedContextTimerTask$1.runInContext (ManagedContextTimerTask.java:30) at org.apache.cloudstack.managed.context.ManagedContextRunnable$1.run(ManagedCo ntextRunnable.java:49) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext$1.call(Defa ultManagedContext.java:56) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.callWithCon text(DefaultManagedContext.java:103) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.runWithCont ext(DefaultManagedContext.java:53) at org.apache.cloudstack.managed.context.ManagedContextRunnable.run(ManagedCont extRunnable.java:46) at org.apache.cloudstack.managed.context.ManagedContextTimerTask.run(ManagedCon textTimerTask.java:32) at java.util.TimerThread.mainLoop(Timer.java:555) at java.util.TimerThread.run(Timer.java:505) Caused by: javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but that protocol version is not enabled or not supported by the client. at sun.security.ssl.ClientHandshaker.serverHello(ClientHandshaker.java:452) at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:206) at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1052) ... 45 more 2018-08-04 09:24:30,108 ERROR [c.c.h.v.r.VmwareResource] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) Unexpected Exception com.cloud.utils.exception.CloudRuntimeException: Unable to connect to vSphere server: cs.un-real.com at com.cloud.hypervisor.vmware.resource.VmwareResource.getServiceContext(Vmware Resource.java:6002) at com.cloud.hypervisor.vmware.resource.VmwareResource.getServiceContext(Vmware Resource.java:5964) at com.cloud.hypervisor.vmware.resource.VmwareResource.configure(VmwareResource .java:5856) at com.cloud.hypervisor.vmware.VmwareServerDiscoverer.reloadResource(VmwareServ erDiscoverer.java:742) at com.cloud.agent.manager.AgentManagerImpl.loadDirectlyConnectedHost(AgentMana gerImpl.java:717) at com.cloud.agent.manager.ClusteredAgentManagerImpl.scanDirectAgentToLoad(Clus teredAgentManagerImpl.java:227) at com.cloud.agent.manager.ClusteredAgentManagerImpl.runDirectAgentScanTimerTas k(ClusteredAgentManagerImpl.java:192) at com.cloud.agent.manager.ClusteredAgentManagerImpl.access$100(ClusteredAgentM anagerImpl.java:99) at com.cloud.agent.manager.ClusteredAgentManagerImpl$DirectAgentScanTimerTask.r unInContext(ClusteredAgentManagerImpl.java:243) at org.apache.cloudstack.managed.context.ManagedContextTimerTask$1.runInContext (ManagedContextTimerTask.java:30) at org.apache.cloudstack.managed.context.ManagedContextRunnable$1.run(ManagedCo ntextRunnable.java:49) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext$1.call(Defa ultManagedContext.java:56) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.callWithCon text(DefaultManagedContext.java:103) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.runWithCont ext(DefaultManagedContext.java:53) at org.apache.cloudstack.managed.context.ManagedContextRunnable.run(ManagedCont extRunnable.java:46) at org.apache.cloudstack.managed.context.ManagedContextTimerTask.run(ManagedCon textTimerTask.java:32) at java.util.TimerThread.mainLoop(Timer.java:555) at java.util.TimerThread.run(Timer.java:505) 2018-08-04 09:24:30,109 WARN [c.c.h.v.VmwareServerDiscoverer] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) Unable to configure resource due to Failed to configure VmwareResource due to unexpect exception. 2018-08-04 09:24:30,109 WARN [c.c.a.m.AgentManagerImpl] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) Unable to load the resource: 1 2018-08-04 09:24:30,109 DEBUG [c.c.h.Status] (ClusteredAgentManager Timer:ctx-71cb01bb) (logid:878a9555) Transition:[Resource state = Enabled, Agent event = AgentDisconnected, Host id = 1, name = ns305xxxxx.ip-xxxxxxx.eu] Is there a workaround for how to fix this this? All the best Cristian
