OpenVMS: Securing OpenVMS 10.2 agent fails while Checking issuer hostname in the certificate (Doc ID 1240776.1)

Last updated on FEBRUARY 09, 2011

Applies to:

Enterprise Manager Grid Control - Version: 10.2.0.2 and later   [Release: 10.2 and later ]
HP OpenVMS Itanium
HP OpenVMS Alpha

Symptoms

Checked for relevance on 9-Feb-2011.

Securing a 10.2.0.2 Grid Agent on OpenVMS fails as follows:

$ emctl secure agent agent123

Oracle Enterprise Manager 10g Release 10.2.0.2.0.
Copyright (c) 1996, 2006 Oracle Corporation. All rights reserved.
Agent is already stopped... Done.
Securing agent... Started.
Requesting an HTTPS Upload URL from the OMS... Done.
Requesting an Oracle Wallet and Agent Key from the OMS... Done.
Check if HTTPS Upload URL is accessible from the agent... Done.
%NONAME-?-NOMSG, Message number 00000006
%NONAME-?-NOMSG, Message number 00000006

The secure.log shows:

$ type ora_root:[sysman.log]secure.log;

KDIDV101:[ABCDEFGHIJKLMNOPQRSTUVWXYZ.sysman.log]secure.log;18
Enter password
[16-10-2010 09:49:44] USERINFO :: Done.
[16-10-2010 09:49:44] USERINFO ::Check if HTTPS Upload URL is accessible from th
e agent...
[16-10-2010 09:49:44] USERINFO :: Done.
[16-10-2010 09:49:44] INFO ::Checking issuer hostname in the certificate...
[16-10-2010 09:49:44] INFO :: Failed.

The same example with more information provided in secure.log

$ define em_secure_verbose true

$ emctl secure agent agent123

Oracle Enterprise Manager 10g Release 10.2.0.2.0.
Copyright (c) 1996, 2006 Oracle Corporation. All rights reserved.
Agent is already stopped... Done.
Securing agent... Started.
Requesting an HTTPS Upload URL from the OMS... Done.
Requesting an Oracle Wallet and Agent Key from the OMS... Done.
Check if HTTPS Upload URL is accessible from the agent... Done.
%NONAME-?-NOMSG, Message number 00000006
%NONAME-?-NOMSG, Message number 00000006

$ type ora_root:[sysman.log]secure.log;

Enter password
[main] INFO sec.GetWallet - walletURL=http://lab123.us.oracle.com:4889/em/
genwallet/?host=itan01&port=1830&pwdSelect=47947E8499E431169021A664A409DC13
[main] INFO sec.GetWallet - downloadURL=http://lab123.us.oracle.com:4889/e
m/wallets/agent.itan01
[main] INFO sec.GetWallet - walletDestination=/kdidv101/abcdefghijklmnopqrstuv
wxyz/itan01/sysman/config/server
[main] INFO sec.GetWallet - localTrustCert=/kdidv101/abcdefghijklmnopqrstuvwxy
z/itan01/sysman/config/b64LocalCertificate.txt
[main] INFO sec.GetWallet - internetTrustCert=/kdidv101/abcdefghijklmnopqrstuv
wxyz/itan01/sysman/config/b64InternetCertificate.txt
[main] INFO sec.GetWallet - agentHost=itan01
[main] DEBUG sec.GetWallet - generateAgentSeed:agent seed =-6698903066309485341
[main] DEBUG sec.GetWallet - secureAgentWithOMS: szAgent seed = -66989030663094
85341
[main] DEBUG sec.GetWallet - secureAgentWithOMS: MD5IPW = C779E9F2514BA70B3C2C2
6132D826FC3
[main] DEBUG sec.GetWallet - secureAgentWithOMS: init URL = http://lab123.u
s.oracle.com:4889/em/genwallet/?host=itan01&port=1830&pwdSelect=47947E8499E43116
9021A664A409DC13&agentseed=-6698903066309485341&reqstatus=init
[main] DEBUG sec.GetWallet - secureAgentWithOMS: auth URL = http://lab123.u
s.oracle.com:4889/em/genwallet/?host=itan01&port=1830&pwdSelect=47947E8499E43116
9021A664A409DC13&agentseed=-6698903066309485341&reqstatus=auth&agentAuth=77A5593
1928E2BD8CB46E1187D910B11
[main] DEBUG sec.GetWallet - secureAgentWithOMS: Agent key = BB94AD7EA1CF708BE3
DA3F94B978E0D2
[main] DEBUG sec.GetWallet - storing agent key succeeded.
[main] DEBUG sec.util - URL Source: http://lab123.us.oracle.com:4889/em/wal
lets/agent.itan01/ewallet.p12
[main] DEBUG sec.util - Destination /kdidv101/abcdefghijklmnopqrstuvwxyz/itan01
/sysman/config/server/ewallet.p12
[main] DEBUG sec.util - contentType=application/octet-stream
[main] DEBUG sec.util - contentLength=2467
[main] DEBUG sec.util - anticipated length: 2467 buffer length: 2467
[main] DEBUG sec.util - URL Source: http://lab123.us.oracle.com:4889/em/wal
lets/agent.itan01/b64LocalCertificate.txt
[main] DEBUG sec.util - Destination /kdidv101/abcdefghijklmnopqrstuvwxyz/itan01
/sysman/config/b64LocalCertificate.txt
[main] DEBUG sec.util - contentType=text/plain
[main] DEBUG sec.util - contentLength=1322
[main] DEBUG sec.util - anticipated length: 1322 buffer length: 1322
[main] DEBUG sec.util - URL Source: http://lab123.us.oracle.com:4889/em/wal
lets/agent.itan01/b64InternetCertificate.txt
[main] DEBUG sec.util - Destination /kdidv101/abcdefghijklmnopqrstuvwxyz/itan01
/sysman/config/b64InternetCertificate.txt
[main] DEBUG sec.util - contentType=text/plain
[main] DEBUG sec.util - contentLength=11214
[main] DEBUG sec.util - anticipated length: 11214 buffer length: 11214
[16-10-2010 09:54:13] USERINFO :: Done.
[16-10-2010 09:54:13] USERINFO ::Check if HTTPS Upload URL is accessible from th
e agent...
[16-10-2010 09:54:13] DEBUG ::Executing ... pipe java -cp /kdidv101/abcdefghi
jklmnopqrstuvwxyz/jdbc/lib/ojdbc14.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/lib/
xmlparserv2.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/sysman/jlib/log4j-core.jar:
/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/http_client.jar:/kdidv101/abcdefghijkl
mnopqrstuvwxyz/jlib/share.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/jssl-1_1
.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/javax-ssl-1_1.jar:/kdidv101/abcde
fghijklmnopqrstuvwxyz/jlib/ojmisc.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/
repository.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/opmn/lib/optic.jar:/kdidv101
/abcdefghijklmnopqrstuvwxyz/sysman/jlib/emagentRT.jar:/kdidv101/abcdefghijklmnop
qrstuvwxyz/sysman/jlib/emagentSDK.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/lib/d
msEmd.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/sysman/jlib/emcoreAgent.jar "-Dpr
opertiesFile=/kdidv101/abcdefghijklmnopqrstuvwxyz/itan01/sysman/config/emd.prope
rties" "-Ddebug=true" oracle.sysman.eml.sec.emd.CheckURLAvailability "https://
lab213.us.oracle.com:1159/em/upload" > ora_root:[sysman.log]secure.log
[16-10-2010 09:54:13] USERINFO :: Done.
[16-10-2010 09:54:13] INFO ::Checking issuer hostname in the certificate...
[16-10-2010 09:54:13] DEBUG ::Executing ... java -cp /kdidv101/abcdefghijklmn
opqrstuvwxyz/jdbc/lib/ojdbc14.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/lib/xmlpa
rserv2.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/sysman/jlib/log4j-core.jar:/kdid
v101/abcdefghijklmnopqrstuvwxyz/jlib/http_client.jar:/kdidv101/abcdefghijklmnopq
rstuvwxyz/jlib/share.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/jssl-1_1.jar:
/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/javax-ssl-1_1.jar:/kdidv101/abcdefghij
klmnopqrstuvwxyz/jlib/ojmisc.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/jlib/repos
itory.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/opmn/lib/optic.jar:/kdidv101/abcd
efghijklmnopqrstuvwxyz/sysman/jlib/emagentRT.jar:/kdidv101/abcdefghijklmnopqrstu
vwxyz/sysman/jlib/emagentSDK.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/lib/dmsEmd
.jar:/kdidv101/abcdefghijklmnopqrstuvwxyz/sysman/jlib/emcoreAgent.jar "-Dpropert
iesFile=/kdidv101/abcdefghijklmnopqrstuvwxyz/itan01/sysman/config/emd.properties
" "-Ddebug=true" oracle.sysman.eml.sec.emd.AuthRepUrl "-authConn" "https://lab123
.us.oracle.com:1159/em/upload"
[16-10-2010 09:54:13] INFO :: Failed.

Changes

None.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms