Unable to config VNA to use SSL

Products

• CA Virtual Network Assurance
• DX NetOps

Issue/Introduction

New installation of VNA on RHEL 8.1, VNA version 21.2.6.

Followed the instructions procedure outline in the documentation to enable HTTPS:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/virtual-network-assurance/21-2/securing/enable-https-for-virtual-network-assurance.html

But wildfly service attempted to start and failed. 

 

Environment

Dx NetOps Virtual Network Assurance 21.2

 

Cause

The following error in the server.log indicated an incorrect password for the keystore:

2022-02-05 18:12:15,264 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ ("subsystem" => "elytron"), ("key-manager" => "httpsKM") ]) - failure description: {"WFLYCTL0080: Failed services" => {"org.wildfly.security.key-manager.httpsKM" => "java.security.UnrecoverableKeyException: Cannot recover key Caused by: java.security.UnrecoverableKeyException: Cannot recover key"}} 2022-02-05 18:12:15,265 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ ("subsystem" => "messaging-activemq"), ("server" => "default") ]) - failure description: { "WFLYCTL0412: Required services that are not installed:" => ["jboss.http-upgrade-registry.https"], "WFLYCTL0180: Services with missing/unavailable dependencies" => ["jboss.messaging-activemq.default is missing [jboss.http-upgrade-registry.https]"] }

Resolution

Revert to HTTP and start over.

Put the correct password for the keystore in the following location:

/subsystem=elytron/key-manager=httpsKM:add(key-store=httpsKS,credential-reference={clear-text=keystorePassword})