Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Error to start smartsense

avatar
Master Collaborator

Hi:

After install smartsense to support, i cant start the services, there are somenthing wrong with the ssl certificates:

We have Centos 6 64 bits

Traceback (most recent call last):
  File "/usr/sbin/hst-agent.py", line 420, in <module>
    main(sys.argv)
  File "/usr/sbin/hst-agent.py", line 397, in main
    setup(options)
  File "/usr/sbin/hst-agent.py", line 323, in setup
    server_hostname = get_server_hostname(server, tries, try_sleep, options.quiet)
  File "/usr/sbin/hst-agent.py", line 107, in get_server_hostname
    hostname = validate_server_hostname(default_hostname, tries, try_sleep)
  File "/usr/sbin/hst-agent.py", line 125, in validate_server_hostname
    elif not register_agent(server_hostname):
  File "/usr/sbin/hst-agent.py", line 143, in register_agent
    if not server_api.register_agent(agent_version):
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/ServerAPI.py", line 104, in register_agent
    content = self.call(request)
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/ServerAPI.py", line 52, in call
    self.cachedconnect = security.CachedHTTPSConnection(self.config)
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/security.py", line 111, in __init__
    self.connect()
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/security.py", line 116, in connect
    self.httpsconn.connect()
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/security.py", line 87, in connect
    raise err
ssl.SSLError: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Anny suggestion??

1 ACCEPTED SOLUTION

avatar
Rising Star

Verify that the following commands returns the same value.

hostname -f

python -c "import socket; print socket.getfqdn()"

View solution in original post

8 REPLIES 8

avatar
Rising Star

Verify that the following commands returns the same value.

hostname -f

python -c "import socket; print socket.getfqdn()"

avatar
Rising Star

what is the version of SmartSense?

avatar
Master Collaborator

SmartSense1.2.1.0-161

avatar
Master Collaborator

Yes, the same value.....

avatar
Rising Star

if the version is 1.2.2 or above, you can run "hst reset-agent -q"

avatar
Master Collaborator

Yes, the same value.....

avatar
Rising Star

Looks like HST server side certificate got into invalid state. It needs to be reset to make it work. Attach the hst-server logs and the output of "ls -al /var/lib/smartsense/hst-server/keys/" and "ls -al /var/lib/smartsense/hst-agent/keys/" commands.

avatar
Master Collaborator
ls -al /var/lib/smartsense/hst-server/keys/
total 16
drwxr-xr-x 3 root root 4096 Oct 27 09:08 .
drwxr-xr-x 4 root root 4096 Oct 27 09:08 ..
-rw-r--r-- 1 root root  780 Feb 26  2016 ca.config
drwx------ 3 root root 4096 Oct 27 09:08 db
ls -al /var/lib/smartsense/hst-agent/keys/
total 32
drwxr-xr-x 2 root root 4096 Oct 27 23:06 .
drwxr-xr-x 4 root root 4096 Oct 27 09:09 ..
-rw-r--r-- 1 root root 7128 Oct 27 09:09 ca.crt
-rw-r--r-- 1 root root 4188 Oct 27 09:09 xxxx.crt
-rw-r--r-- 1 root root  554 Oct 27 09:09 xxxx.csr
-rw-r--r-- 1 root root  916 Oct 27 09:09 xxxx.key

after run hst reset-agent -q and restart services now its working.

Many Thanks