« Back
You are in : Recent Topics » OEMs & Developers » Web NMS » Deepak - SSL(https) mode of communication
Guest

Deepak - SSL(https) mode of communication
by 
Guest
 on 05-Nov-2009 12:41 AM.
  in  OEMs & Developers 
» Web NMS

 Hi,

I am implementing SSL(https) mode of communication. I am following the configurations provided in Adventnet Developers guide - Enabling SSL in Combo Setup

I have followed all the steps and the server is starting with SSL port 8443.

But when i am trying to start the client through IE giving https://localhost:8443 . I am facing some issues.

1. As soon as the webpage comes Certificate Error is coming

2. web start client is unable to start completely.

I am pasting te Error which came in log file.

It says "Unable to connect to SSL socket"

 

 

/*** Log File **

----------------General Information----------------

Product = ZenManage

User Name = SuperUser

BE Server Name = deepakl-int

FE Server Name = localhost

Protocol = https

OS Name = Windows XP

OS Version = 5.1

OS Architecture = x86

Java Version = 1.6.0

Java Vendor = Sun Microsystems Inc.

Java Specification = Java Platform API Specification

Java Specification version = 1.6

Java VM name = Java HotSpot(TM) Client VM

Java VM information = mixed mode, sharing

Java Compiler = null

----------------------------------------------------

Messages on Wednesday, November 4, 2009

----------------------------------------------------

Instantiated main scheduler with 4 threads

scheduler initialized

java.net.ConnectException: Connection refused: connect

at java.net.PlainSocketImpl.socketConnect(Native Method)

at java.net.PlainSocketImpl.doConnect(Unknown Source)

at java.net.PlainSocketImpl.connectToAddress(Unknown Source)

at java.net.PlainSocketImpl.connect(Unknown Source)

at java.net.SocksSocketImpl.connect(Unknown Source)

at java.net.Socket.connect(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.<init>(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(Unknown Source)

at com.adventnet.nms.client.GenericSocketClient.createSSLSocket(GenericSocketClient.java:566)

at com.adventnet.nms.client.GenericSocketClient.establishConnection(GenericSocketClient.java:119)

at com.adventnet.nms.client.GenericSocketClient.<init>(GenericSocketClient.java:75)

at com.adventnet.nms.util.PureClientUtils.initGenericSocket(PureClientUtils.java:118)

at com.adventnet.nms.util.PureClientUtils.initializeCommonSocket(PureClientUtils.java:100)

at com.adventnet.nms.startclient.NmsMainApplet.start(NmsMainApplet.java:273)

at com.adventnet.nms.startclient.WebNMSClient.initializeTheApplet(WebNMSClient.java:1058)

at com.adventnet.nms.startclient.WebNMSClient.doconnect(WebNMSClient.java:820)

at com.adventnet.nms.startclient.WebNMSClient.run(WebNMSClient.java:2124)

at java.lang.Thread.run(Unknown Source)

Problem in Establish Connection - GenericSocketClient

java.lang.Exception: Unable to create SSL Socket.

at com.adventnet.nms.client.GenericSocketClient.establishConnection(GenericSocketClient.java:122)

at com.adventnet.nms.client.GenericSocketClient.<init>(GenericSocketClient.java:75)

at com.adventnet.nms.util.PureClientUtils.initGenericSocket(PureClientUtils.java:118)

at com.adventnet.nms.util.PureClientUtils.initializeCommonSocket(PureClientUtils.java:100)

at com.adventnet.nms.startclient.NmsMainApplet.start(NmsMainApplet.java:273)

at com.adventnet.nms.startclient.WebNMSClient.initializeTheApplet(WebNMSClient.java:1058)

at com.adventnet.nms.startclient.WebNMSClient.doconnect(WebNMSClient.java:820)

at com.adventnet.nms.startclient.WebNMSClient.run(WebNMSClient.java:2124)

at java.lang.Thread.run(Unknown Source)

Unable to establish connection with the hostlocalhost

Registering for responses GENERIC_ID

Registering for responses ALERTCOUNT_CLIENT

Error occured while creating instance for NmsPanel : com.adventnet.nms.mapui.BaseStationMapApplet

java.lang.SecurityException: class "com.adventnet.nms.mapui.BaseStationMapApplet"'s signer information does not match signer information of other classes in the same package

at java.lang.ClassLoader.checkCerts(Unknown Source)

at java.lang.ClassLoader.preDefineClass(Unknown Source)

at java.lang.ClassLoader.defineClass(Unknown Source)

at java.security.SecureClassLoader.defineClass(Unknown Source)

at java.net.URLClassLoader.defineClass(Unknown Source)

at java.net.URLClassLoader.access$000(Unknown Source)

at java.net.URLClassLoader$1.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at java.net.URLClassLoader.findClass(Unknown Source)

at java.lang.ClassLoader.loadClass(Unknown Source)

at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)

at java.lang.ClassLoader.loadClass(Unknown Source)

at java.lang.ClassLoader.loadClassInternal(Unknown Source)

at java.lang.Class.forName0(Native Method)

at java.lang.Class.forName(Unknown Source)

at com.adventnet.nms.startclient.MainPanel.createNmsPanel(MainPanel.java:8187)

at com.adventnet.nms.startclient.MainPanel.run(MainPanel.java:677)

at com.adventnet.nms.startclient.MainPanel.init(MainPanel.java:517)

at com.adventnet.nms.startclient.NmsMainFrame.init(NmsMainFrame.java:75)

at com.adventnet.nms.startclient.NmsMainApplet.run(NmsMainApplet.java:353)

at java.lang.Thread.run(Unknown Source)

Registering for responses EVENT_CLIENT

Registering for responses ALERT_CLIENT

Instantiated playbackCheck scheduler with 1 threads

Registering for responses LIST_CLIENT

Registering for responses POLL_CLIENT

Registering for responses SAS_CLIENT

 

 

 

 

Attachments
  • No status
  • Answered
  • Working on it
  • Need more info
  1 user has this question 
barathv

Re: Deepak - SSL(https) mode of communication

by 
barathv
 on 06-Nov-2009 12:30 AM

 Hi,

You are getting the error "Unable to connect to SSL socket". The reason of this error is the following error:

java.lang.SecurityException: class "com.adventnet.nms.mapui.BaseStationMapApplet"'s signer information does not match signer information of other classes in the same package

Believe you have signed all the jars of WebNMS/classes folder. There is some jar signer mismatch and hence please sign all the jars properly and try if you able to communicate in SSL.


Regards,

Barath


Guest

Re: Re: Deepak - SSL(https) mode of communication

by 
Guest
 on 08-Nov-2009 10:45 PM

Hi,

  I signed the jars of WebNMS/classes folder."java.lang.SecurityException:class" error is not coming, but the client still unable to connect to the Server.

The Error is "

Problem in Establish Connection - GenericSocketClient

java.lang.Exception: Unable to create SSL Socket.

"

 

/* log file */

Java Web Start 1.6.0_10

Using JRE version 1.6.0_10 Java HotSpot(TM) Client VM

User home directory = C:\Documents and Settings\deepakl-int

----------------------------------------------------

c: clear console window

f: finalize objects on finalization queue

g: garbage collect

h: display this help message

m: print memory usage

o: trigger logging

p: reload proxy configuration

q: hide console

r: reload policy configuration

s: dump system and deployment properties

t: dump thread list

v: dump thread stack

0-5: set trace level to <n>

----------------------------------------------------

Instantiated main scheduler with 4 threads

scheduler initialized

java.net.ConnectException: Connection refused: connect

at java.net.PlainSocketImpl.socketConnect(Native Method)

at java.net.PlainSocketImpl.doConnect(Unknown Source)

at java.net.PlainSocketImpl.connectToAddress(Unknown Source)

at java.net.PlainSocketImpl.connect(Unknown Source)

at java.net.SocksSocketImpl.connect(Unknown Source)

at java.net.Socket.connect(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketImpl.<init>(Unknown Source)

at com.sun.net.ssl.internal.ssl.SSLSocketFactoryImpl.createSocket(Unknown Source)

at com.adventnet.nms.client.GenericSocketClient.createSSLSocket(GenericSocketClient.java:566)

at com.adventnet.nms.client.GenericSocketClient.establishConnection(GenericSocketClient.java:119)

at com.adventnet.nms.client.GenericSocketClient.<init>(GenericSocketClient.java:75)

at com.adventnet.nms.util.PureClientUtils.initGenericSocket(PureClientUtils.java:118)

at com.adventnet.nms.util.PureClientUtils.initializeCommonSocket(PureClientUtils.java:100)

at com.adventnet.nms.startclient.NmsMainApplet.start(NmsMainApplet.java:273)

at com.adventnet.nms.startclient.WebNMSClient.initializeTheApplet(WebNMSClient.java:1058)

at com.adventnet.nms.startclient.WebNMSClient.doconnect(WebNMSClient.java:820)

at com.adventnet.nms.startclient.WebNMSClient.run(WebNMSClient.java:2124)

at java.lang.Thread.run(Unknown Source)

Problem in Establish Connection - GenericSocketClient

java.lang.Exception: Unable to create SSL Socket.

at com.adventnet.nms.client.GenericSocketClient.establishConnection(GenericSocketClient.java:122)

at com.adventnet.nms.client.GenericSocketClient.<init>(GenericSocketClient.java:75)

at com.adventnet.nms.util.PureClientUtils.initGenericSocket(PureClientUtils.java:118)

at com.adventnet.nms.util.PureClientUtils.initializeCommonSocket(PureClientUtils.java:100)

at com.adventnet.nms.startclient.NmsMainApplet.start(NmsMainApplet.java:273)

at com.adventnet.nms.startclient.WebNMSClient.initializeTheApplet(WebNMSClient.java:1058)

at com.adventnet.nms.startclient.WebNMSClient.doconnect(WebNMSClient.java:820)

at com.adventnet.nms.startclient.WebNMSClient.run(WebNMSClient.java:2124)

at java.lang.Thread.run(Unknown Source)

Unable to establish connection with the host172.20.218.185

Registering for responses GENERIC_ID

Registering for responses ALERTCOUNT_CLIENT

Registering for responses MAP_CLIENT

Registering for responses EVENT_CLIENT

Registering for responses ALERT_CLIENT

Instantiated playbackCheck scheduler with 1 threads

Registering for responses LIST_CLIENT

Registering for responses POLL_CLIENT

Registering for responses SAS_CLIENT

 

Regards

Deepak

 

Attachments
barathv

Re: Deepak - SSL(https) mode of communication

by 
barathv
 on 08-Nov-2009 11:27 PM

 Hi,

We believe you have created the SSL certificates by running the file "createCertificates.bat". Please correct us if we are wrong.

Please send us the following files, so that we can find on what is the problem:

1. NmsProcessesBE.conf file (under "WebNMS/conf/" folder)

2. server.xml (under apache/tomcat/conf/backup/ foldcer)

3. serverParameters.conf (under "WebNMS/conf/" folder)

4. startnms.bat file (under "WebNMS/bin/" folder)

5. launcher_conf.txt (under "WebNMS/conf/" folder)

Regards,

Barath Kumar


Guest

Re: Deepak - SSL(https) mode of communication

by 
Guest
 on 09-Nov-2009 03:28 AM

HIi,

Yes i created the certificate using "createCertificates.bat file". I have attached all the files specified by you.

 

In one of the configuration as

Applet and Web Start Client Configurations as below they have menstiond to put .trustore file in <JRE_HOME>jre/lib/security , So i placed that file in jre of Adventnet/Webnms/jre as well System's jre path. Is it ok 

The following points need to be ensured for enabling the SSL mode of communication for the Applet and the Web Start clients:

  1. Place the <truststore_file>.truststore file in the browser's <JRE_HOME>jre/lib/security directory

  2. Add an entry for permission in the java.policy file located in the <JRE_HOME>jre/lib/security as,

grant {

permission java.lang.reflect.ReflectPermission "suppressAccessChecks", "";

permission javax.net.ssl.SSLPermission "setHostnameVerifier", "";

permission java.util.PropertyPermission "*", "read,write";

};

 

Attachments
Guest

Re: Deepak - SSL(https) mode of communication

by 
Guest
 on 09-Nov-2009 03:34 AM

 Hi,

I am posting the remailng 3 files.The attach File is not loading files with .conf and .bat extension. So i have converted them to .doc format and sending to you. Please check out can u able to open it or else i send it in whatever format u say.

Attachments
Guest

Re: Deepak - SSL(https) mode of communication

by 
Guest
 on 09-Nov-2009 03:43 AM

Hi,

 

The following how the server is startd on 8843 port.

 

This OEM edition of ZenManage is of Professional license type and has been licen

sed to KyoceraWireless in KyoceraWireless for AdventNet WebNMS.

Starting ZenManage "Primary" Server Modules, please wait

 

Process : StartTelnetClient [ Started ]

Process : CustomPerfProcess [ Started ]

Process : ProcessTest [ Started ]

Process : TL1DiscProcess [ Started ]

Process : NMSTAServer [ Started ]

Process : NMSMServer [ Started ]

Process : TL1EventProcess [ Started ]

Process : UserConfigProcess [ Started ]

Process : DBServer [ Started ]

Process : WebNMSMgmtBEProcess [ Started ]

Process : WebNMSBackUp [ Started ]

Process : NmsAuthenticationManager [ Started ]

Process : RunRmiRegistry [ Started ]

Process : CLIFactoryBinder [ Started ]

Process : SnmpConfigProcess [ Started ]

Process : DataMgmtRPI [ Started ]

Process : CustomProcess [ Started ]

Process : TL1CustomViewsMgr [ Started ]

Process : StorageServer [ Started ]

Process : NmsConfigurationServer [ Started ]

Process : RunJSPModule [ Started ]

Process : NmsSUM [ Started ]

Process : NmsTftpServer [ Started ]

Process : TL1GatewayProcess [ Started ]

Process : StartProvModule [ Started ]

Process : NMSSAServer [ Started ]

Process : AdminModuleInit [ Started ]

Process : EventMgr [ Started ]

Process : WebNMSAgentApp [ Started ]

Process : NmsPolicyMgr [ Started ]

Process : Collector [ Started ]

Process : MapServerBE [ Started ]

Process : NmsAuthManager [ Started ]

Process : MServerFE [ Started ]

Process : TAServerFE [ Started ]

Process : SAServerFE [ Started ]

Process : AuthenticationManagerFE [ Started ]

Process : NmsSAServerFE [ Started ]

Process : MapFE [ Started ]

Process : PolicyFE [ Started ]

Process : AlertFE [ Started ]

Process : UserConfigProcessFE [ Started ]

Process : ConfigFE [ Started ]

Process : NmsMainFE [ Started ]

Process : StorageServerFE [ Started ]

Process : AuthorizationManagerFE [ Started ]

Process : StartTelnetClientFE [ Started ]

Process : PollFE [ Started ]

Process : ExampleFE [ Started ]

Process : TopoFE [ Started ]

Process : ProvisioningFE [ Started ]

Process : EventFE [ Started ]

Process : WebNMSMgmtFEProcess [ Started ]

Verifying connection with web server ... verified

ZenManage Server modules started successfully at Nov 09,2009 05:10:21 PM

Please connect your client to the web server on port: 8443

 

 Regards

Deepak

 

barathv

Re: Deepak - SSL(https) mode of communication

by 
barathv
 on 09-Nov-2009 03:57 AM

 Hi,

Also send your transportProvider.conf.

Barath

barathv

Re: Deepak - SSL(https) mode of communication

by 
barathv
 on 09-Nov-2009 04:13 AM
Hi,

In serverParmeters.conf file you did not configure the following:

NMS_FE_SECONDARY_PORT 3606

Please do this configuration and restart the server. This is explained in the doc:

http://www.webnms.com/webnms/help/developer_guide/communication_services/ssl/ssl_combo.html

and believe you have missed it.

Barath
Guest

Re: Deepak - SSL(https) mode of communication

by 
Guest
 on 09-Nov-2009 10:53 PM

HI,

  Thanks For u r response. Yes i missed NMS_FE_SECONDARY_PORT 3606 part. I configured it and started the server.Now, the client is able to connect to the server.

But, Still from the URL when i give "https://localhost:8443" Certificate error is coming on the URL.

I have Installed (imported) the cerificate in "Trusted Root Certification Authorities" and 

in View Certificate -> Certification Path -> It says Certificate is ok but still the cerificate Error is showing up.

I am attaching the Screen Shot of website and certifiacte.Please Look into it.

Regards

Deepak 

 

 

Attachments
 Back
 Top
Post Actions
Statistics
  • 9
     Replies
  • 276
     Views
  • 0
     Followers
Tags for the post
© 2009 Corp. All rights reserved. Trademarks | Privacy Policy | Site Map | Contact Us | Careers

Edit Link Delete Link

Edit Link Delete Link

LoadingImage