topic Re: Polyserve SSL Certs have expired as of 20120921 in Storage Software

Polyserve SSL Certs have expired as of 20120921

LanceVD — Mon, 24 Sep 2012 04:54:55 GMT

Dear HP,

Where may i find fresh SSL certs for Polyserve (v3.6.2)?

The server.pem and cacert.pem have expired as of 21 September 2012, and hp.com is found lacking relevant information.

Working on work-arounds, but no joy at this hour.

=LVD

Both certs issued by: PMXS Certificate Authority:

E = support@polyserve.com
CN = PMXS Certificate Authority

OU = Certificate Authority
O = Polyserve, Inc
L = San Fransisco
S = CA
C = US

Re: Polyserve SSL Certs have expired as of 20120921

DonFerguson — Mon, 24 Sep 2012 05:42:38 GMT

This is critical as we can't administer PolyServe anymore. We get the following error when trying to open the management console:

Error when connecting to the server:

Error: java.lang.NullPointerException

And when using the mx command line:

C:\>mx
[WARN] sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
[WARN] sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
[WARN] Could not update cache of version: null, Unable to determine current version from server: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
Error: java.lang.NullPointerException

Re: Polyserve SSL Certs have expired as of 20120921

DonFerguson — Mon, 24 Sep 2012 08:08:56 GMT

Found a very ugly work around. If you change the date on an inactive server node in your cluster to an earlier time during the month then you can run the MX console. Like I said it's ugly and a very less than ideal solution, but it is the only work around that we could come up with right now.

HP, I realize that PolyServe is EOL, but you really need to fix this ASAP!!!

Re: Polyserve SSL Certs have expired as of 20120921

Michael Arvizu — Mon, 24 Sep 2012 12:35:47 GMT

Hi Everyone,

We now have updated Certificates available for this issue. If you have any difficulties with this, please open a case with HP Support and we'll be happy to assist.

The package is downloadable from:

ftp://pscerts:ye_XP7wu@ftp.usa.hp.com

There is a readme file included that contains the instructions. Here is what is involved:

Instructions for installation:

Copy the following files to the following locations in the MatrixServer installed root.

NOTE:
C:\Program Files\Polyserve\MatrixServer\ is the default server installation location for the software-only version.
C:\Program Files\Hewlett-Packard\HP Clustered File System\ is the default server installation location for the CGW version.
Any non-standard installation may have a different path

When performing the following procedure, please rename the existing file to FILE.EXT.orig (i.e. cacert.pem.orig) prior to placing the new file.

Please verify that the server date and time are correct prior to replacing the certificates - The new certificates are only valid from here moving forward (until 2022).

** For standalone Polyserve Management Console: Any clients with Matrix Server Console installed need to replace the following file from this ZIP archive to within the MXConsole root installation:

cacerts - lib\jre\lib\security\cacerts

Search for other locations on the server for the "cacerts" file. It can exist in other locations, and if found replace them in the same manner.

** For MatrixServer cluster nodes: On each Matrix Server node, replace the following from this ZIP archive in the installation root of MatrixServer and MXConsole (if installed):

     cacerts       - lib\jre\lib\security\cacerts
     server.pem    - lib\apache\server.pem
     cacert.pem    - lib\apache\certs\cacert.pem
     ca_bundle.crt - lib\apache\conf\ssl.crt\ca_bundle.crt
     server.crt    - lib\apache\conf\ssl.crt\server.crt
     server.key    - lib\apache\conf\ssl.key\server.key

** (Please note: If the standalone client is installed on the Matrix nodes, please refer to the "standalone" instructions in addition to the MatrixServer instructions)

Then restart the "Polyserve MatrixServer Web Service" via services.msc or via: > net stop pswebsrv > net start pswebsrv

You can now reopen the Management Console.   If it fails, please run with the '--debug' option again and copy the messages out of the log for review:

Mxconsolew --debug

Let me know if you have any questions or need any clarification on the above.

Regards,

Michael Arvizu

HHP Technology Services – Global Competency Center

Hewlett-Packard Company

Microsoft High Availability Support /

ISS GCC Converged Infrastructure & Networking Engineer
E-mail:Michael.Arvizu@hp.com

Work Hours: 6am – 2pm Central, GMT -6:00 Mon - Fri

Main HP Support phone number: 1 (800) 633-3600

Manager: Tony.Strickhouser@HP.com

Re: Polyserve SSL Certs have expired as of 20120921

DonFerguson — Mon, 24 Sep 2012 16:34:41 GMT

Yes, that fixes it. Thanks for the timely update Michael.

Re: Polyserve SSL Certs have expired as of 20120921

shull2hfhs — Wed, 26 Sep 2012 14:17:35 GMT

Thanks!

Re: Polyserve SSL Certs have expired as of 20120921

Dennis Gurgul — Fri, 11 Jan 2013 20:44:37 GMT

The link at http://h30499.www3.hp.com/t5/Polyserve-Solutions/Polyserve-SSL-Certs-have-expired-as-of-20120921/td-p/5811795

seems to be discussing PS on Windows. We have PS on Linux. The Management Console does run on Windows.

Here's the path on a Windows machine for the Mgt. Console:

"C:\Program Files (x86)\PolyServe\ManagementConsole\bin\mxconsole.exe"

Is there a fix for this problem for us? Can it just be a Windows patch for the Management Console? (I should be so lucky:-)

Thanks

dgurgul@partners.org

Re: Polyserve SSL certificates have expired as of 2012-09-21

Dennis Handly — Sun, 13 Jan 2013 00:41:06 GMT

>Is there a fix for this problem for us?

Wouldn't you have seen this already?

Copy the certificates to the right places?

Re: Polyserve SSL Certs have expired as of 20120921

rhorkay — Sun, 19 May 2013 15:27:03 GMT

The password is not working to the ftp site, can you update where we can download the updated certs.

Re: Polyserve SSL certificates have expired as of 2012-09-21

Dennis Handly — Mon, 20 May 2013 16:52:45 GMT

>The password is not working to the ftp site

Should we ask why didn't you download them back in Sept? ;-)

Re: Polyserve SSL Certs have expired as of 2012-09-21

rhorkay — Mon, 20 May 2013 13:19:47 GMT

Good question, we've known the MMC was not accessible for some time, but we never needed to touch it.

I have two polyserve machines left, basically was waiting for the legal department to get permission to shut them down, which is taking forever, so I'm going to migrate the instances to vm ware to "park" them until that happens, i need to get to the mmc as I wanted to disable the instance and the virtual dns name so we could create a dns alias that points to the new vm ware instance.

any help on where to get these files would be appreciated.

Re: Polyserve SSL certificates have expired as of 2012-09-21

Dennis Handly — Mon, 20 May 2013 16:53:32 GMT

>any help on where to get these files would be appreciated.

My first suggestion would be to go through Support.

Then you could contact Michael Arvizu, the poster here.

Re: Polyserve SSL Certs have expired as of 20120921

littlem — Fri, 16 Aug 2013 06:39:48 GMT

Hi Michael Arvizu,

Our Polyserve SSL certs have also been expired. Can you let me know where I can download the certs or can you send me the cert files from your side? Many thanks!

Re: Polyserve SSL Certs have expired as of 20120921

Peter J. Milanese — Sun, 01 Sep 2013 13:30:18 GMT

Is there a current download spot for the certs?

Re: Polyserve SSL certificates have expired as of 2012-09-21

Dennis Handly — Sat, 06 Feb 2016 06:34:50 GMT

>Is there a current download spot for the certificates?

If you have a support contract I would check with the HPSC:

http://h20566.www2.hpe.com/portal/site/hpsc

Re: Polyserve SSL Certs have expired as of 20120921

Michael Arvizu — Tue, 18 Feb 2014 13:30:47 GMT

Hi all,

The previous ftp account expired, so I created a new one with the Polyserve certificates. Use this link:

ftp://pcerts:Pa$$w0rd@ftp.usa.hp.com

Regards,

Michael Arvizu

ISS/SW Microsoft High Availability/Polyserve

Global Competency Center

Hewlett Packard Company

Houston, TX USA

Phone: 1-800-633-3600

Email: Michael.Arvizu@hp.com

Working Hours: 6am - 2pm Central (GMT -6) Mon - Fri

Re: Polyserve SSL Certs have expired as of 20120921

Christian Borck — Fri, 05 Feb 2016 10:03:14 GMT

I know this is REALLY old. But I NEED this file ASAP!