Error to start smartsense

[#1]

Hi:

After install smartsense to support, i cant start the services, there are somenthing wrong with the ssl certificates:

We have Centos 6 64 bits

Traceback (most recent call last):
  File "/usr/sbin/hst-agent.py", line 420, in <module>
    main(sys.argv)
  File "/usr/sbin/hst-agent.py", line 397, in main
    setup(options)
  File "/usr/sbin/hst-agent.py", line 323, in setup
    server_hostname = get_server_hostname(server, tries, try_sleep, options.quiet)
  File "/usr/sbin/hst-agent.py", line 107, in get_server_hostname
    hostname = validate_server_hostname(default_hostname, tries, try_sleep)
  File "/usr/sbin/hst-agent.py", line 125, in validate_server_hostname
    elif not register_agent(server_hostname):
  File "/usr/sbin/hst-agent.py", line 143, in register_agent
    if not server_api.register_agent(agent_version):
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/ServerAPI.py", line 104, in register_agent
    content = self.call(request)
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/ServerAPI.py", line 52, in call
    self.cachedconnect = security.CachedHTTPSConnection(self.config)
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/security.py", line 111, in __init__
    self.connect()
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/security.py", line 116, in connect
    self.httpsconn.connect()
  File "/usr/hdp/share/hst/hst-agent/lib/hst_agent/security.py", line 87, in connect
    raise err
ssl.SSLError: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Anny suggestion??

[#2 · Accepted solution]

Verify that the following commands returns the same value.

hostname -f

python -c "import socket; print socket.getfqdn()"

[#3]

what is the version of SmartSense?

[#4]

SmartSense1.2.1.0-161

[#5]

Yes, the same value.....

[#6]

if the version is 1.2.2 or above, you can run "hst reset-agent -q"

[#7]

Yes, the same value.....

[#8]

Looks like HST server side certificate got into invalid state. It needs to be reset to make it work. Attach the hst-server logs and the output of "ls -al /var/lib/smartsense/hst-server/keys/" and "ls -al /var/lib/smartsense/hst-agent/keys/" commands.

[#9]

ls -al /var/lib/smartsense/hst-server/keys/
total 16
drwxr-xr-x 3 root root 4096 Oct 27 09:08 .
drwxr-xr-x 4 root root 4096 Oct 27 09:08 ..
-rw-r--r-- 1 root root  780 Feb 26  2016 ca.config
drwx------ 3 root root 4096 Oct 27 09:08 db

ls -al /var/lib/smartsense/hst-agent/keys/
total 32
drwxr-xr-x 2 root root 4096 Oct 27 23:06 .
drwxr-xr-x 4 root root 4096 Oct 27 09:09 ..
-rw-r--r-- 1 root root 7128 Oct 27 09:09 ca.crt
-rw-r--r-- 1 root root 4188 Oct 27 09:09 xxxx.crt
-rw-r--r-- 1 root root  554 Oct 27 09:09 xxxx.csr
-rw-r--r-- 1 root root  916 Oct 27 09:09 xxxx.key

after run hst reset-agent -q and restart services now its working.

Many Thanks