Can't Replicate Environments After Update

23 views
Skip to first unread message

Eric Kaltman

unread,
Jul 15, 2019, 11:52:56 AM7/15/19
to eaasi-t...@googlegroups.com

Hi,

 

We were trying to go through the Soup to Nuts today, but I’m unable to replicate the Windows 95 / 98 test environments from the Beta testing workflows. This was previously not an issue. Log error attached.

 

Best,

Eric

eaas_cmu_log_message_20190715.log

Stanonik, Ronald

unread,
Jul 15, 2019, 11:58:09 AM7/15/19
to eaasi-t...@googlegroups.com

I’ve been testing and it appears that replications don’t appear until after I restart the eaas service.

Still testing.

Ron

--
You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-tech-ta...@googlegroups.com.
To post to this group, send email to eaasi-t...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/96F9BB58-3D5F-4F31-B3A0-25BEC945340E%40andrew.cmu.edu.
For more options, visit https://groups.google.com/d/optout.

Klaus Rechert

unread,
Jul 15, 2019, 11:58:29 AM7/15/19
to Eric Kaltman, eaasi-t...@googlegroups.com
Hi Eric,

looks like the system also tries to import an emulator, which fails. Do you have more context for that logfile?

Thanks
Klaus
> --
> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-tech-ta...@googlegroups.com.
> To post to this group, send email to eaasi-t...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/96F9BB58-3D5F-4F31-B3A0-25BEC945340E%40andrew.cmu.edu.
> For more options, visit https://groups.google.com/d/optout.
> <eaas_cmu_log_message_20190715.log>

jkiritharan

unread,
Jul 15, 2019, 12:01:51 PM7/15/19
to EaaSI Tech Talk
I'm seeing some things about security errors in the log file. 
Could this be related to the hacky ssl fix of manually adding our certificate to the cacerts file in the docker container so that our cert would be accepted by eaas?
We could try putting up an instance without ssl and see if that fixes it.

-Jonathan


On Monday, July 15, 2019 at 11:58:29 AM UTC-4, Klaus Rechert wrote:
Hi Eric,

looks like the system also tries to import an emulator, which fails. Do you have more context for that logfile?

Thanks
        Klaus

> Am 15.07.2019 um 17:52 schrieb Eric Kaltman <ekal...@andrew.cmu.edu>:
>
> Hi,
>  
> We were trying to go through the Soup to Nuts today, but I’m unable to replicate the Windows 95 / 98 test environments from the Beta testing workflows. This was previously not an issue. Log error attached.
>  
> Best,
> Eric
>
> --
> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-t...@googlegroups.com.

Eric Kaltman

unread,
Jul 15, 2019, 12:09:28 PM7/15/19
to jkiritharan, EaaSI Tech Talk

Hi Jonathan, Klaus,

 

I guess that might be an issue, so reverting might help? I can share more of the log file if you like. The context is that I’m just going through the Beta testing protocols with the rest of the team right now, and was replicating two environments from Yale to install the Golf / Encarta examples (“Windows 95 Test Env”, “Windows 98 Test Env”).

 

Best,

Eric

To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-tech-ta...@googlegroups.com.


To post to this group, send email to eaasi-t...@googlegroups.com.

Klaus Rechert

unread,
Jul 15, 2019, 12:14:22 PM7/15/19
to Eric Kaltman, jkiritharan, EaaSI Tech Talk
Hi Eric,

my guess is lack of storage / tmp space. Log would be helpful, might be a quick fix.

Best
Klaus
> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/7686CC73-AC3D-45FB-9329-80D81F728B74%40andrew.cmu.edu.

Eric Kaltman

unread,
Jul 15, 2019, 12:21:00 PM7/15/19
to Klaus Rechert, jkiritharan, EaaSI Tech Talk
Attached the server.log from /eaas-home/log/server. If there's another log you need lemme know.
eaas_cmu_server_20190715.log

Klaus Rechert

unread,
Jul 15, 2019, 12:59:24 PM7/15/19
to Eric Kaltman, jkiritharan, EaaSI Tech Talk
Hi Eric, hi Jonathan,

we were able to pin down the problem. Jonathan's guess was good, it was the certificate problem. However, the problem is solvable:

If you do a:

openssl s_client -connect eaasi-prod.library.cmu.edu:443

you can see that your certificate chain is incomplete.

>> Verify return code: 21 (unable to verify the first certificate)

Copying the certificate from the openssl output into a file and looking into to the public certificate (openssl x509 -in /tmp/cmu.crt -text), gives us the missing intermediate certificate:

>> CA Issuers - URI:http://crt.usertrust.com/InCommonRSAServerCA_2.crt

CURL it:
curl -O http://crt.usertrust.com/InCommonRSAServerCA_2.crt

and convert it

openssl x509 -in InCommonRSAServerCA_2.crt -inform DER > InCommonRSAServerCA_2.pem

Finally, copy & paste the content of InCommonRSAServerCA_2.pem below your CMU cert in your server.crt file.

That should be it. Server ships now the complete chain. Redeploy and verify with openssl.

Good luck!
Klaus
> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/2F549210-79EF-46AE-83E8-1F0F0B07F8F7%40andrew.cmu.edu.
> For more options, visit https://groups.google.com/d/optout.
> <eaas_cmu_server_20190715.log>

jkiritharan

unread,
Jul 15, 2019, 1:20:32 PM7/15/19
to EaaSI Tech Talk
Alright!
openssl s_client -connect eaasi-prod.library.cmu.edu:443
returns something that looks a bit nicer. All ready for Eric to try the soup 2 nuts again.

thank you.

>> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/4fde4414-eea9-4eef-ada8-5ae9cf9ddc60%40googlegroups.com.
>> For more options, visit https://groups.google.com/d/optout.
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
>> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-t...@googlegroups.com.
>> To post to this group, send email to eaasi-t...@googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/msgid/eaasi-tech-talk/7686CC73-AC3D-45FB-9329-80D81F728B74%40andrew.cmu.edu.
>> For more options, visit https://groups.google.com/d/optout.
>
>
>
> --
> You received this message because you are subscribed to the Google Groups "EaaSI Tech Talk" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to eaasi-t...@googlegroups.com.
> To post to this group, send email to eaasi-t...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages