vSphere Client からログバンドル取得に失敗する

Products

• VMware vSphere ESXi

Issue/Introduction

Host Client からのログバンドル取得は成功するが、vSphere Client からのログバンドル取得に失敗する。

下記のような SSL エラーのログが確認できる。

[YYYY-MM-DDThh:mm:ss.###+TZ] [INFO ] http-nio-5090-exec-60        70015028 111498 215201 com.vmware.vise.util.session.SessionUtil                          Associated sessionId 111498 with clientId 215201. Context path: /ui/admin-ui 
[YYYY-MM-DDThh:mm:ss.###+TZ] [ERROR] http-nio-5090-exec-55         c.v.vsphere.client.h5.admin.controllers.ExportLogsController      FileId parameter is empty. 
[YYYY-MM-DDThh:mm:ss.###+TZ] [ERROR] http-nio-5090-exec-55         c.v.vsphere.client.h5.admin.controllers.ExportLogsController      Error while downloading logs. javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at sun.security.ssl.Alert.createSSLException(Alert.java:131)
        at sun.security.ssl.TransportContext.fatal(TransportContext.java:331)
        at sun.security.ssl.TransportContext.fatal(TransportContext.java:274)
        at sun.security.ssl.TransportContext.fatal(TransportContext.java:269)
        at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
        at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
        at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
        at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)
        at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)
        at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)
        at sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)
        at sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)
        at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1401)
        at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1309)
        at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)
        at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
        at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197)
        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1342)
        at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1317)
        at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:264)
        at com.vmware.vise.util.http.ConnectionManager.connect(ConnectionManager.java:272)
        at com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:354)
        at com.vmware.vise.util.http.SimpleHttpClient.connect(SimpleHttpClient.java:324)
        at com.vmware.vise.util.http.SimpleHttpClient.executeMethodResponseAsStream(SimpleHttpClient.java:222)
        at com.vmware.vise.util.http.SimpleHttpClient.executeMethodResponseAsStream(SimpleHttpClient.java:244)
        at com.vmware.vsphere.client.logbundle.HttpZipEntry.connect(HttpZipEntry.java:207)
        at com.vmware.vsphere.client.logbundle.UrlZipEntry.write(UrlZipEntry.java:162)
        at com.vmware.vsphere.client.h5.admin.controllers.ExportLogsController.writeHostLogsToStream(ExportLogsController.java:598)
        at com.vmware.vsphere.client.h5.admin.controllers.ExportLogsController.access$500(ExportLogsController.java:81)
        at com.vmware.vsphere.client.h5.admin.controllers.ExportLogsController$1.run(ExportLogsController.java:367)
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)

Environment

VMware vSphere ESX
VMware vSphere ESXi

Cause

この問題は、ESXi の SSL 証明書が vCenter Server の信頼されたルート証明書から検証できなかったときに発生します。

Resolution

ESXi で VMCA で署名された証明書を使用している場合には、[構成] -> [システム] -> [証明書] -> [更新] から証明書を更新します。

ESXi でカスタム証明書を使用している場合には、しかるべき手順で証明書を更新します。

Additional Information

Generating ESX/ESXi logbundle from vSphere Client failed.