Error: "Object Storage Extension service endpoint is found not accessible from your web browser" after updating OSE certificate
search cancel

Error: "Object Storage Extension service endpoint is found not accessible from your web browser" after updating OSE certificate

book

Article ID: 443814

calendar_today

Updated On:

Products

VMware Cloud Director

Issue/Introduction

You may experience the following error in the user interface: "Object Storage Extension service endpoint is found not accessible from your web browser."

Additionally, you may observe the following symptoms:

  • This issue occurs immediately after updating the Object Storage Extension (OSE) certificate.

  • The OSE service continuously restarts.

  • The /opt/vmware/voss/log/ose-default.log file on the OSE VM contains the following error:

I/O error on GET request for "https://URL/api/versions": (internal_error) Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
        at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1786)

Environment

 

  • VMware Cloud Director Object Storage Extension (OSE)

  • Cloudian Integration

 

Cause

The imported PEM certificate file does not contain the full certificate chain, or the trust between OSE and the Cloudian platform (as well as VMware Cloud Director) must be refreshed following the certificate update. The trustAnchors parameter must be non-empty log entry specifically indicates an issue with the trusted root CA not being properly established.

Resolution

To resolve this issue, complete the following steps:

  1. Verify that the imported PEM file contains the full certificate chain in the correct order: Entity Certificate -> Intermediate CA -> Root CA.

  2. Log in to the OSE VM console. To find the required URLs and usernames needed when running the configuration set commands below, run the ose cloudian show and ose director show commands.

  3. Refresh the trust between OSE and the Cloudian platform by running the ose cloudian s3 set command.

  4. Run the ose cloudian admin set command.

  5. Run the ose cloudian iam set command.

  6. Run the ose cloudian console set command.

  7. Refresh the trust with VMware Cloud Director by running the ose director set command.

  8. Apply the configuration changes by restarting the OSE service using the ose service restart command.

Additional Information

Also see:  VMware Cloud Director Object Storage Extension Command-Line Interface reference

Powered by Wolken Software