I suspect you are hitting the issue
https://github.com/apache/cloudstack/issues/9718
Unfortunately I have no idea how to fix it in the codewise, except
migrating the vm or stopping/starting it

-Wei

On Thu, Nov 14, 2024 at 7:31 PM Jimmy Huybrechts <ji...@linservers.com>
wrote:

> Seems indeed you are on to something.
>
> I have 6 hosts, all KVM.
>
> If I pick a VM on host 3, it opens the console, if I pick a vm on host 2
> it says not after Nov 1st, if I pick a VM on host 4 it says not after nov
> 14th.
>
> So How do I fix this? :)
>
> --
> Jimmy
>
> From: Wei ZHOU <ustcweiz...@gmail.com>
> Date: Thursday, 14 November 2024 at 18:16
> To: users@cloudstack.apache.org <users@cloudstack.apache.org>
> Subject: Re: ssl certificate proxy vm not working
> Do you use kvm ?
> If so, it might be due to the expiration (and renewal) of certificate on
> the kvm host.
> Try migrating the vm to another host, or stop/start it.
>
>
> On Thursday, November 14, 2024, Jimmy Huybrechts <ji...@linservers.com>
> wrote:
>
> > Hi,
> >
> > So I’m having a weird issue on the proxy vm with the certificate. I know
> > the certificate is correct, because when I copy them from the database
> and
> > put them into an ssl decoder it shows up as not after 31 dec 2024.
> >
> > However if I try opening the console of an instance it just says
> > connecting and then times out.
> >
> > When I look in the systemvm itself it then says:
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> > java.base/java.lang.Thread.run(Thread.java:829)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> com.cloud.consoleproxy.
> > ConsoleProxyNoVncClient$1.run(ConsoleProxyNoVncClient.java:108)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> com.cloud.consoleproxy.
> > ConsoleProxyNoVncClient.authenticateToVNCServer(
> > ConsoleProxyNoVncClient.java:189)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> com.cloud.consoleproxy.
> > ConsoleProxyNoVncClient.authenticateVNCServerThroughNioSocket(
> > ConsoleProxyNoVncClient.java:232)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> com.cloud.consoleproxy.
> > ConsoleProxyNoVncClient.handshakePhase(ConsoleProxyNoVncClient.java:204)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> com.cloud.consoleproxy.
> > ConsoleProxyNoVncClient.handshakeSecurityResult(
> > ConsoleProxyNoVncClient.java:210)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> > com.cloud.consoleproxy.vnc.NoVncClient.processHandshakeSecurityType(
> > NoVncClient.java:518)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]:         at
> > com.cloud.consoleproxy.vnc.security.VncTLSSecurity.
> > process(VncTLSSecurity.java:96)
> > Nov 14 15:51:22 v-255-VM _run.sh[2717]: Exception in thread "Thread-27"
> > com.cloud.utils.exception.CloudRuntimeException:
> javax.net.ssl.SSLHandshakeException:
> > NotAfter: Fri Nov 01 13:28:12 UTC 2024
> >
> > But I have no idea where it gets that 1 nov from.. how to check which
> > certs the system vm has?
> >
> > --
> > Jimmy
> >
>

Reply via email to