VCF Bringup - PROXY_VALIDATION_ SSL_VALIDATION_ERROR

Products

• VMware SDDC Manager

Issue/Introduction

• PROXY_VALIDATION_ SSL_VALIDATION_ERROR seen during bringup
  
  

• var/log/vmware/vcf/bringup/vcf-bringup.log
  • Caused by: org.springframework.web.client.HttpClientErrorException$BadRequest: 400 : "{"errorCode":"PROXY_VALIDATION_ SSL_VALIDATION_ERROR","arguments":["10.10.10.10","8080","HTTP",null,https://depot.vmware.com],"message":"Can't vali date proxy configuration: Error establish SSL/TLS connection to proxy. Invalid proxy SSL certificate","remediationMes sage":"Check proxy certificate subject or subject alternative name are for hostname entered in proxy configuration. Check Proxy certificate signing CA is trusted by VCF SDDC Manager, if not add Proxy signing CA certificate to SDDC Man ager trust store. See <link to docs> (https://kb.vmware.com/s/article/78607)","referenceToken":"QWE1"}"

 

Environment

VCF 5.x

Cause

Proxy being used is set to http rather than https with a valid certificate

 

Resolution

As there is no way to change proxy type from SDDC Manager and the proxy type is read from the proxy server itself.

The only ways to correct this are to introduce a https proxy and restart bringup while enabling the proxy option.

 

Alternatively to restart bringup and disable the proxy option.