SSL issue with Connections 6.0CR5 and Component Pack 6.0.0.9

HCL Connections Connections Forum
, ,
1

I've just deployed Component Pack to enable Metrics based on Elasticsearch. My last attempted step was to migrate metrics data to elasticsearch and it fails. I have the following error in SystemOut:

[6/9/21 16:11:15:596 MSK] 00000c55 Elasticsearch W com.ibm.connections.metrics.elasticsearch.ElasticsearchClient httpRequest HTTP request to ElasticSearch failed.
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at com.ibm.jsse2.k.a(k.java:42)
at com.ibm.jsse2.k.a(k.java:37)
at com.ibm.jsse2.av.b(av.java:549)
at com.ibm.jsse2.av.a(av.java:715)
at com.ibm.jsse2.av.i(av.java:574)
at com.ibm.jsse2.av.a(av.java:280)
at com.ibm.jsse2.av.startHandshake(av.java:431)
at com.ibm.ws.ssl.config.WSSocket.startHandshake(WSSocket.java:414)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:261)
at org.apache.http.impl.conn.HttpClientConnectionOperator.connect(HttpClientConnectionOperator.java:118)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:314)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:357)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:218)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:194)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:85)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:108)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:186)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)
at com.ibm.connections.metrics.elasticsearch.ElasticsearchClient.httpRequest(ElasticsearchClient.java:480)

2

Did you follow the documentation? Keystore import to Websphere successful? ES Url in Highway Service verified?

https://help.hcltechsw.com/connections/v65/admin/install/cp_config_es_connect_to_cp_server.html

3

I did follow the guide and it seems that there were no errors in "python config_blue_metrics.py --skipSslCertCheck true --pinkhost mypink.host.name" at least I got expected output.

The ES keys were successfully imported, I can see "ESCloudSSLSettings" and "ESCloudKeyStore" in WebSphere console.

4

Hi Anatoly,

This one looks like it might be best handled via a support case as it seems you've covered the configuration steps pretty well. Please include all the details in this forum thread along with any additional tracing so that we can process the new case more efficiently. Also, you may wish to include a link to this forum thread for our awareness.

Wes