Storage Software
1748162 Members
3642 Online
108758 Solutions
New Discussion

Re: Polyserve SSL Certs have expired as of 20120921

 
LanceVD
Occasional Contributor

Polyserve SSL Certs have expired as of 20120921

Dear HP,

Where may i find fresh SSL certs for Polyserve (v3.6.2)?

The server.pem and cacert.pem have expired as of 21 September 2012, and hp.com is found lacking relevant information.

 

Working on work-arounds, but no joy at this hour.

=LVD

 

Both certs issued by: PMXS Certificate Authority:

E = support@polyserve.com
CN = PMXS Certificate Authority

OU = Certificate Authority
O = Polyserve, Inc
L = San Fransisco
S = CA
C = US

16 REPLIES 16
DonFerguson
Advisor

Re: Polyserve SSL Certs have expired as of 20120921

This is critical as we can't administer PolyServe anymore.  We get the following error when trying to open the management console:

 

Error when connecting to the server:

 

Error: java.lang.NullPointerException

 

 

And when using the mx command line:

C:\>mx
[WARN] sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
[WARN] sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
[WARN] Could not update cache of version: null, Unable to determine current version from server: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
Error: java.lang.NullPointerException

DonFerguson
Advisor

Re: Polyserve SSL Certs have expired as of 20120921

Found a very ugly work around.  If you change the date on an inactive server node in your cluster to an earlier time during the month then you can run the MX console.  Like I said it's ugly and a very less than ideal solution, but it is the only work around that we could come up with right now.

 

HP, I realize that PolyServe is EOL, but you really need to fix this ASAP!!!

Michael Arvizu
Visitor

Re: Polyserve SSL Certs have expired as of 20120921

Hi Everyone,

 

We now have updated Certificates available for this issue.  If you have any difficulties with this, please open a case with HP Support and we'll be happy to assist.

 

The package is downloadable from:

 

ftp://pscerts:ye_XP7wu@ftp.usa.hp.com

 

 

There is a readme file included that contains the instructions.  Here is what is involved:

 

Instructions for installation:

Copy the following files to the following locations in the MatrixServer installed root. 

NOTE:
C:\Program Files\Polyserve\MatrixServer\ is the default server installation location for the software-only version. 
C:\Program Files\Hewlett-Packard\HP Clustered File System\ is the default server installation location for the CGW version.
Any non-standard installation may have a different path

When performing the following procedure, please rename the existing file to FILE.EXT.orig (i.e. cacert.pem.orig) prior to placing the new file.


Please verify that the server date and time are correct prior to replacing the certificates -   The new certificates are only valid from here moving forward (until 2022).   

** For standalone Polyserve Management Console:  Any clients with Matrix Server Console installed need to replace the following file from this ZIP archive to within the MXConsole root installation:

 

     cacerts       - lib\jre\lib\security\cacerts    

Search for other locations on the server for the "cacerts" file.  It can exist in other locations, and if found replace them in the same manner.   

** For MatrixServer cluster nodes:  On each Matrix Server node, replace the following from this ZIP archive in the installation root of MatrixServer and MXConsole (if installed):    

     cacerts       - lib\jre\lib\security\cacerts  
     server.pem    - lib\apache\server.pem  
     cacert.pem    - lib\apache\certs\cacert.pem  
     ca_bundle.crt - lib\apache\conf\ssl.crt\ca_bundle.crt  
     server.crt    - lib\apache\conf\ssl.crt\server.crt  
     server.key    - lib\apache\conf\ssl.key\server.key   

** (Please note: If the standalone client is installed on the Matrix nodes, please refer to the "standalone" instructions in addition to the MatrixServer instructions)   

Then restart the "Polyserve MatrixServer Web Service" via services.msc or via:  > net stop pswebsrv  > net start pswebsrv 

You can now reopen the Management Console.   If it fails, please run with the '--debug' option again and copy the messages out of the log for review:

 

        Mxconsolew --debug

 

Let me know if you have any questions or need any clarification on the above.

 

Regards,

 

 

 

Michael Arvizu

HHP Technology Services – Global Competency Center

Hewlett-Packard Company

Microsoft High Availability Support /

ISS GCC Converged Infrastructure & Networking Engineer
E-mail:Michael.Arvizu@hp.com

Work Hours: 6am – 2pm Central, GMT -6:00 Mon - Fri

Main HP Support phone number: 1 (800) 633-3600

Manager: Tony.Strickhouser@HP.com

DonFerguson
Advisor

Re: Polyserve SSL Certs have expired as of 20120921

Yes, that fixes it.  Thanks for the timely update Michael.

shull2hfhs
New Member

Re: Polyserve SSL Certs have expired as of 20120921

Thanks!

Dennis Gurgul
Occasional Contributor

Re: Polyserve SSL Certs have expired as of 20120921

The link at http://h30499.www3.hp.com/t5/Polyserve-Solutions/Polyserve-SSL-Certs-have-expired-as-of-20120921/td-p/5811795

 

seems to be discussing PS on Windows.  We have PS on Linux.  The Management Console does run on Windows. 

 

Here's the path on a Windows machine for the Mgt. Console:

"C:\Program Files (x86)\PolyServe\ManagementConsole\bin\mxconsole.exe"

 

Is there a fix for this problem for us?  Can it just be a Windows patch for the Management Console?  (I should be so lucky:-)

 

Thanks

 

dgurgul@partners.org

Dennis Handly
Acclaimed Contributor

Re: Polyserve SSL certificates have expired as of 2012-09-21

>Is there a fix for this problem for us?

 

Wouldn't you have seen this already?

Copy the certificates to the right places?

rhorkay
Occasional Visitor

Re: Polyserve SSL Certs have expired as of 20120921

The password is not working to the ftp site, can you update where we can download the updated certs.

Dennis Handly
Acclaimed Contributor

Re: Polyserve SSL certificates have expired as of 2012-09-21

>The password is not working to the ftp site

 

Should we ask why didn't you download them back in Sept?  ;-)