Can't Replicate Environments After Update

[Eric Kaltman]

Hi,

 

We were trying to go through the Soup to Nuts today, but I’m unable to replicate the Windows 95 / 98 test environments from the Beta testing workflows. This was previously not an issue. Log error attached.

 

Best,

Eric

[Stanonik, Ronald]

I’ve been testing and it appears that replications don’t appear until after I restart the eaas service.

Still testing.

Ron

--
You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-tech-ta...@googlegroups.com.
To post to this group, send email to eaasi-t...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/96F9BB58-3D5F-4F31-B3A0-25BEC945340E%40andrew.cmu.edu.
For more options, visit https://groups.google.com/d/optout.

[Klaus Rechert]

Hi Eric,

looks like the system also tries to import an emulator, which fails. Do you have more context for that logfile?

Thanks
Klaus

> --
> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-tech-ta...@googlegroups.com.
> To post to this group, send email to eaasi-t...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/96F9BB58-3D5F-4F31-B3A0-25BEC945340E%40andrew.cmu.edu.
> For more options, visit https://groups.google.com/d/optout.

> <eaas_cmu_log_message_20190715.log>

[jkiritharan]

I'm seeing some things about security errors in the log file. 

Could this be related to the hacky ssl fix of manually adding our certificate to the cacerts file in the docker container so that our cert would be accepted by eaas?

We could try putting up an instance without ssl and see if that fixes it.

-Jonathan

On Monday, July 15, 2019 at 11:58:29 AM UTC-4, Klaus Rechert wrote:

Hi Eric,

looks like the system also tries to import an emulator, which fails. Do you have more context for that logfile?

Thanks
        Klaus

> Am 15.07.2019 um 17:52 schrieb Eric Kaltman <ekal...@andrew.cmu.edu>:
>
> Hi,
>  
> We were trying to go through the Soup to Nuts today, but I’m unable to replicate the Windows 95 / 98 test environments from the Beta testing workflows. This was previously not an issue. Log error attached.
>  
> Best,
> Eric
>
> --
> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.

> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-t...@googlegroups.com.

[Eric Kaltman]

Hi Jonathan, Klaus,

 

I guess that might be an issue, so reverting might help? I can share more of the log file if you like. The context is that I’m just going through the Beta testing protocols with the rest of the team right now, and was replicating two environments from Yale to install the Golf / Encarta examples (“Windows 95 Test Env”, “Windows 98 Test Env”).

 

Best,

Eric

To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-tech-ta...@googlegroups.com.

To post to this group, send email to eaasi-t...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/4fde4414-eea9-4eef-ada8-5ae9cf9ddc60%40googlegroups.com.

[Klaus Rechert]

Hi Eric,

my guess is lack of storage / tmp space. Log would be helpful, might be a quick fix.

Best
Klaus

> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/7686CC73-AC3D-45FB-9329-80D81F728B74%40andrew.cmu.edu.

[Eric Kaltman]

Attached the server.log from /eaas-home/log/server. If there's another log you need lemme know.

[Klaus Rechert]

Hi Eric, hi Jonathan,

we were able to pin down the problem. Jonathan's guess was good, it was the certificate problem. However, the problem is solvable:

If you do a:

openssl s_client -connect eaasi-prod.library.cmu.edu:443

you can see that your certificate chain is incomplete.

>> Verify return code: 21 (unable to verify the first certificate)

Copying the certificate from the openssl output into a file and looking into to the public certificate (openssl x509 -in /tmp/cmu.crt -text), gives us the missing intermediate certificate:

>> CA Issuers - URI:http://crt.usertrust.com/InCommonRSAServerCA_2.crt

CURL it:
curl -O http://crt.usertrust.com/InCommonRSAServerCA_2.crt

and convert it

openssl x509 -in InCommonRSAServerCA_2.crt -inform DER > InCommonRSAServerCA_2.pem

Finally, copy & paste the content of InCommonRSAServerCA_2.pem below your CMU cert in your server.crt file.

That should be it. Server ships now the complete chain. Redeploy and verify with openssl.

Good luck!
Klaus

> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/2F549210-79EF-46AE-83E8-1F0F0B07F8F7%40andrew.cmu.edu.

> For more options, visit https://groups.google.com/d/optout.

> <eaas_cmu_server_20190715.log>

[jkiritharan]

Alright!

openssl s_client -connect eaasi-prod.library.cmu.edu:443

returns something that looks a bit nicer. All ready for Eric to try the soup 2 nuts again.

thank you.

>> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/4fde4414-eea9-4eef-ada8-5ae9cf9ddc60%40googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.

>> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-t...@googlegroups.com.
>> To post to this group, send email to eaasi-t...@googlegroups.com.

>> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/7686CC73-AC3D-45FB-9329-80D81F728B74%40andrew.cmu.edu.
>> For more options, visit https://groups.google.com/d/optout.
>
>
>
> --
> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.

> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-t...@googlegroups.com.
> To post to this group, send email to eaasi-t...@googlegroups.com.