Re: Polyserve SSL certificates have expired as of 2012-09-21 (407 Views)
Reply
Occasional Contributor
LanceVD
Posts: 1
Registered: ‎09-23-2012
Message 1 of 16 (1,837 Views)

Polyserve SSL Certs have expired as of 20120921

Dear HP,

Where may i find fresh SSL certs for Polyserve (v3.6.2)?

The server.pem and cacert.pem have expired as of 21 September 2012, and hp.com is found lacking relevant information.

 

Working on work-arounds, but no joy at this hour.

=LVD

 

Both certs issued by: PMXS Certificate Authority:

E = support@polyserve.com
CN = PMXS Certificate Authority

OU = Certificate Authority
O = Polyserve, Inc
L = San Fransisco
S = CA
C = US

Please use plain text.
Advisor
DonFerguson
Posts: 19
Registered: ‎01-30-2008
Message 2 of 16 (1,829 Views)

Re: Polyserve SSL Certs have expired as of 20120921

This is critical as we can't administer PolyServe anymore.  We get the following error when trying to open the management console:

 

Error when connecting to the server:

 

Error: java.lang.NullPointerException

 

 

And when using the mx command line:

C:\>mx
[WARN] sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
[WARN] sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
[WARN] Could not update cache of version: null, Unable to determine current version from server: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed
Error: java.lang.NullPointerException

Please use plain text.
Advisor
DonFerguson
Posts: 19
Registered: ‎01-30-2008
Message 3 of 16 (1,808 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Found a very ugly work around.  If you change the date on an inactive server node in your cluster to an earlier time during the month then you can run the MX console.  Like I said it's ugly and a very less than ideal solution, but it is the only work around that we could come up with right now.

 

HP, I realize that PolyServe is EOL, but you really need to fix this ASAP!!!

Please use plain text.
Occasional Visitor
Michael Arvizu
Posts: 2
Registered: ‎02-26-2004
Message 4 of 16 (1,787 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Hi Everyone,

 

We now have updated Certificates available for this issue.  If you have any difficulties with this, please open a case with HP Support and we'll be happy to assist.

 

The package is downloadable from:

 

ftp://pscerts:ye_XP7wu@ftp.usa.hp.com

 

 

There is a readme file included that contains the instructions.  Here is what is involved:

 

Instructions for installation:

Copy the following files to the following locations in the MatrixServer installed root. 

NOTE:
C:\Program Files\Polyserve\MatrixServer\ is the default server installation location for the software-only version. 
C:\Program Files\Hewlett-Packard\HP Clustered File System\ is the default server installation location for the CGW version.
Any non-standard installation may have a different path

When performing the following procedure, please rename the existing file to FILE.EXT.orig (i.e. cacert.pem.orig) prior to placing the new file.


Please verify that the server date and time are correct prior to replacing the certificates -   The new certificates are only valid from here moving forward (until 2022).   

** For standalone Polyserve Management Console:  Any clients with Matrix Server Console installed need to replace the following file from this ZIP archive to within the MXConsole root installation:

 

     cacerts       - lib\jre\lib\security\cacerts    

Search for other locations on the server for the "cacerts" file.  It can exist in other locations, and if found replace them in the same manner.   

** For MatrixServer cluster nodes:  On each Matrix Server node, replace the following from this ZIP archive in the installation root of MatrixServer and MXConsole (if installed):    

     cacerts       - lib\jre\lib\security\cacerts  
     server.pem    - lib\apache\server.pem  
     cacert.pem    - lib\apache\certs\cacert.pem  
     ca_bundle.crt - lib\apache\conf\ssl.crt\ca_bundle.crt  
     server.crt    - lib\apache\conf\ssl.crt\server.crt  
     server.key    - lib\apache\conf\ssl.key\server.key   

** (Please note: If the standalone client is installed on the Matrix nodes, please refer to the "standalone" instructions in addition to the MatrixServer instructions)   

Then restart the "Polyserve MatrixServer Web Service" via services.msc or via:  > net stop pswebsrv  > net start pswebsrv 

You can now reopen the Management Console.   If it fails, please run with the '--debug' option again and copy the messages out of the log for review:

 

        Mxconsolew --debug

 

Let me know if you have any questions or need any clarification on the above.

 

Regards,

 

 

 

Michael Arvizu

HHP Technology Services – Global Competency Center

Hewlett-Packard Company

Microsoft High Availability Support /

ISS GCC Converged Infrastructure & Networking Engineer
E-mail:Michael.Arvizu@hp.com

Work Hours: 6am – 2pm Central, GMT -6:00 Mon - Fri

Main HP Support phone number: 1 (800) 633-3600

Manager: Tony.Strickhouser@HP.com

Please use plain text.
Advisor
DonFerguson
Posts: 19
Registered: ‎01-30-2008
Message 5 of 16 (1,765 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Yes, that fixes it.  Thanks for the timely update Michael.

Please use plain text.
Occasional Visitor
shull2hfhs
Posts: 1
Registered: ‎09-26-2012
Message 6 of 16 (1,708 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Thanks!

Please use plain text.
Occasional Contributor
Dennis Gurgul
Posts: 9
Registered: ‎06-01-2011
Message 7 of 16 (1,010 Views)

Re: Polyserve SSL Certs have expired as of 20120921

The link at http://h30499.www3.hp.com/t5/Polyserve-Solutions/Polyserve-SSL-Certs-have-expired-as-of-20120921/td-...

 

seems to be discussing PS on Windows.  We have PS on Linux.  The Management Console does run on Windows. 

 

Here's the path on a Windows machine for the Mgt. Console:

"C:\Program Files (x86)\PolyServe\ManagementConsole\bin\mxconsole.exe"

 

Is there a fix for this problem for us?  Can it just be a Windows patch for the Management Console?  (I should be so lucky:-)

 

Thanks

 

dgurgul@partners.org

Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,753
Registered: ‎03-06-2006
Message 8 of 16 (995 Views)

Re: Polyserve SSL certificates have expired as of 2012-09-21

>Is there a fix for this problem for us?

 

Wouldn't you have seen this already?

Copy the certificates to the right places?

Please use plain text.
Occasional Visitor
rhorkay
Posts: 2
Registered: ‎05-19-2013
Message 9 of 16 (643 Views)

Re: Polyserve SSL Certs have expired as of 20120921

The password is not working to the ftp site, can you update where we can download the updated certs.

Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,753
Registered: ‎03-06-2006
Message 10 of 16 (639 Views)

Re: Polyserve SSL certificates have expired as of 2012-09-21

[ Edited ]

>The password is not working to the ftp site

 

Should we ask why didn't you download them back in Sept?  ;-)

Please use plain text.
Occasional Visitor
rhorkay
Posts: 2
Registered: ‎05-19-2013
Message 11 of 16 (630 Views)

Re: Polyserve SSL Certs have expired as of 2012-09-21

Good question, we've known the MMC was not accessible for some time, but we never needed to touch it.

 

I have two polyserve machines left, basically was waiting for the legal department to get permission to shut them down, which is taking forever, so I'm going to migrate the instances to vm ware to "park" them until that happens, i need to get to the mmc as I wanted to disable the instance and the virtual dns name so we could create a dns alias that points to the new vm ware instance.

 

any help on where to get these files would be appreciated.

Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,753
Registered: ‎03-06-2006
Message 12 of 16 (626 Views)

Re: Polyserve SSL certificates have expired as of 2012-09-21

[ Edited ]

>any help on where to get these files would be appreciated.

 

My first suggestion would be to go through Support.

Then you could contact Michael Arvizu, the poster here.

Please use plain text.
Occasional Visitor
littlem
Posts: 1
Registered: ‎08-15-2013
Message 13 of 16 (430 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Hi Michael Arvizu,

 

Our Polyserve SSL certs have also been expired. Can you let me know where I can download the certs or can you send me the cert files from your side? Many thanks!

 

 

Please use plain text.
Frequent Advisor
Peter J. Milanese
Posts: 39
Registered: ‎01-25-2008
Message 14 of 16 (411 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Is there a current download spot for the certs?

Please use plain text.
Acclaimed Contributor
Dennis Handly
Posts: 24,753
Registered: ‎03-06-2006
Message 15 of 16 (407 Views)

Re: Polyserve SSL certificates have expired as of 2012-09-21

>Is there a current download spot for the certificates?

 

If you have a support contract I would check with the HPSC:

http://www.hp.com/go/hpsc

Please use plain text.
Occasional Visitor
Michael Arvizu
Posts: 2
Registered: ‎02-26-2004
Message 16 of 16 (241 Views)

Re: Polyserve SSL Certs have expired as of 20120921

Hi all,

 

The previous ftp account expired, so I created a new one with the Polyserve certificates.  Use this link:

 

ftp://pcerts:Pa$$w0rd@ftp.usa.hp.com

 

 

Regards,

 

Michael Arvizu

ISS/SW Microsoft High Availability/Polyserve

Global Competency Center

Hewlett Packard Company

Houston, TX USA

Phone: 1-800-633-3600

Email: Michael.Arvizu@hp.com

Working Hours: 6am - 2pm Central (GMT -6) Mon - Fri

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation