Error during VNA 22.2.6 installation
search cancel

Error during VNA 22.2.6 installation

book

Article ID: 264886

calendar_today

Updated On:

Products

Virtual Network Assurance

Issue/Introduction

Received the following error during the VNA 22.2.6 installation.

 

/optCA/MySql/bin/mysql: error while loading shared libraries: libtinfo.so.5: cannot open shared object file: No such file or directory.

Error updating MySql database

A problem occurred during the installation (install directory not deleted). Backing up to /root/vna_22.2.6/CA_VNA_Install_bak

…………

Additional errors seen by capturing the install using ‘script’ command:

script /tmp/install.txt

bash -x install.sh

…………………..

+ pushd /opt/CA/VNA/liquibase

/opt/CA/VNA/liquibase ~/vna_22.2.6

+ ./liquibase --logLevel=severe --driver=com.mysql.cj.jdbc.Driver --classpath=../wildfly/modules/com/mysql/main/mysql-connector-java-commercial.jar --changeLogFile=../schema/vna.db-master.xml --defaultsFile=../schema/liquibase.properties '--url=jdbc:mysql://localhost:3306/hostname?createDatabaseIfNotExist=true&serverTimezone=Etc/GMT' --username=root --password=admin update

+ '[' 1 -ne 0 ']'

+ log 'Error updating MySQL database'

+ echo Error updating MySQL database

Error updating MySQL database

…………….

The last packet sent successfully to the server was 0 milliseconds ago. The driver has not received any packets from the server.

liquibase.exception.CommandExecutionException: liquibase.exception.LiquibaseException: Unexpected error running Liquibase: liquibase.exception.DatabaseException: liquibase.exception.DatabaseException: Connection could not be created to jdbc:mysql://localhost:3306/hostname?createDatabaseIfNotExist=true&serverTimezone=Etc/GMT with driver com.mysql.cj.jdbc.Driver.  Communications link failure

Environment

VNA - all supported releases

Cause

Mysql generates its own internal SSL certs using 2048 bit encryption.

Customer was using crypto-policies to set additional java security in their environment.

Hardening of RHEL 8 with FUTURE policy will cause this issue because it sets a minimum encryption value of <3072

https://access.redhat.com/articles/3642912

https://access.redhat.com/articles/3666211

To check if you have this enabled:

Update-crypto-policies --show

Or check for java.config:

/etc/crypto-policies/back-ends/java.config

Resolution

Configure /etc/crypto-policies/back-ends/java.config to

allow 'RSA keySize < 2048'

Additional Information

Clean up a failed VNA install:

https://knowledge.broadcom.com/external/article?articleId=252867