topic SSL error when accessing System Management Homepage in Operating System - Linux

SSL error when accessing System Management Homepage

toomas_aas — Mon, 26 Jan 2009 17:49:52 GMT

Hello!

I've installed the following rpms onto our SLES10 SP2 (x86_64) server

hp-health-8.1.1-14.sles10.x86_64.rpm
hp-snmp-agents-8.1.1-22.sles10.x86_64.rpm
hpsmh-2.1.15-210.x86_64.rpm
hp-smh-templates-8.1.1-19.noarch.rpm

When starting hp-health, hp-snmp-agents and hpsmhd there seem to be no fatal errors. However, when I try to access the system management homepage via https://myserver:2381
Firefox gives the following error:

Secure Connection Failed
An error occurred during a connection to myserver:2381.
SSL received a record that exceeded the maximum permissible length.
(Error code: ssl_error_rx_record_too_long)

Rebooting the server didn't change this.

in /var/spool/opt/hp/hpsmh/logs/error_log there is only the following:
[Mon Jan 26 19:20:26 2009] [notice] CompaqHTTPServer/9.9 HP System Management Homepage/2.1.15.210 configure
d -- resuming normal operations
[Mon Jan 26 19:23:26 2009] [notice] [client 192.168.1.2] Session timeout set to 15 minutes
[Mon Jan 26 19:23:26 2009] [notice] [client 192.168.1.2] Session maximum set to 128

When I try the plain http access by http://myserver:2301 I get a 404 page stating that "The requested URL /red2301.html was not found on this server."

I've tried to use two different workstations with Firefox 3.0.5 and one with MSIE7 - IE just gives it's typical aggravating 'the page cannot be displayed' style message.

What piece of the puzzle am I missing?

Re: SSL error when accessing System Management Homepage

Steven E. Protter — Mon, 26 Jan 2009 17:55:37 GMT

Shalom,

The ssl certificate for the PSP software has been deleted, moved, or corrupted.

You will need to remove and reinstall the PSP software or identify the certificate file and restore it from backup.

Check permissions on it first.

SEP

Re: SSL error when accessing System Management Homepage

toomas_aas — Mon, 26 Jan 2009 19:41:15 GMT

Actually it turned out I had misconfigured the "IP binding list" when configuring SMH. The phrase "IP Binding" initially (correctly) led me to think that this is the address of local interface where hpsmhd will listen. However, when I was next prompted for netmask, I started to think that maybe "they" expect me to enter the addresses from where I want to access the SMH, which I then did. As soon as I corrected this confusion and restarted hpsmhd, it started working.