Troubleshooting SSL Communication

Products

• CA Automic Dollar Universe

Issue/Introduction

This document list down commands and step can be followed to troubleshoot the issue related to SSL communication between nodes and UVMS.

Environment

Component: DOLLAR UNIVERSE

Version: 6.x, 7.x or higher

Resolution

Validate SERVER and TRUSTEDCA certs on Node

The communication between nodes can be obstructed if they are not having appropriate certificates shared among them to establish TRUST. Follow instruction below to validate the SERVER and TRUSTEDCA certs on each node

• Load the node environment $INSTALL_DIR\unienv.bat/ksh

• Change directory to $INSTALL_DIR\bin and run below commands (use output redirection i.e. >> or > to file)

  • ./unissl LIST -type TRUSTEDCACERT -view 

  • ./unissl LIST -type SERVERCERT -view

 

Enabling SSL Traces

Enable SSL Traces in the main log level of the Nodes, where SSL communication issue is observed. Follow the instruction below to enable trace

• Login to UVC
• Navigate to UVC > Nodes > Select Node > Node Settings > Logging > Main Log Level and set to 0,SSL,SSLPROC,NETWORK

Validate inter-node communication via Command Line

To validate the communication between node we can do same by running below command

Command Syntax: $SOURCE_NODE_INSTALL_DIR\bin\uxlst atm node=TARGET_NODE

Additional Information

Reference Article

Dollar Universe running on SSL result in error COM Error u_recv_msg_ssl -1

SSL communication between nodes fails with error Inconsistent SSL