[onap-tsc] [ONAP] [Frankfurt] [Maintenance release] status on certificates

Thu, 09 Jul 2020 01:12:19 -0700 

Hi

I know that we are approaching the Frankfurt maintenance release.
I was wondering what is planned regarding the certificates.

I shared the certificate view from the nodeport perspective some weeks ago.
Yesterday we detected that an internal certificate also expired 
(aaf-cert-service) so I gave a try on all the ports I found from inside the 
cluster (experimental ~ systematic try, I am not sure it is 100% relevant).
I attached both reports in the mail.

What we can see

on the nodeport report (test executed as end user calling the exposed https 
endpoints) nothing new regarding the previous report

1) the 2 dgbuilder certificates have expired since almost 1 year.
@Taka, Dan: shall we keep them as such?
2) Refrepo expired 17 days ago
@Kanagaraj any plan?
3) so-vnfm
@seshu would it be fixed with the next generation of dockers planned for the 
maintenance release?
4) several projects include too long certificates and the root CA is not correct
robot: so it is for the Integration PTL :), this pod is only for testing.
I do not plan to do anything for the Frankfurt maintenance release. But a 
refactoring of this pod is planned for Guilin)
What about the uui, msb, cli, appc project, which are part of the release?

on the internal report we have additional info as we are trying all the ports 
reported by the kubernetes client on the ONAP namespace
we do not see the recent expiration because the deployment failed due to the 
expiration. There is a patch in gate to fix aaf-cert-service
esr-server certificate expired more than 2 days ago..
without surprise holmes certificates are expired. We do not test them but the 
components are still deployed.
multicloud certificates are also too long

I got lots of SSL errors, either wrong version number , SSLv3 bad certificate,  
I am not an expert so I am not 100% sure of the test results but I got lots of 
such errors when I try to retrieve internal certificates. Seccom has surely a 
better view on that.

/Morgan

BTW: shall the certificate management not be a criteria for maturity? I guess 
the answer is yes. It seems that there are still lots of work for most of the 
projects in this area.

_________________________________________________________________________________________________________________________

Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.

This message and its attachments may contain confidential or privileged 
information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete 
this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.
Thank you.


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#6731): https://lists.onap.org/g/onap-tsc/message/6731
Mute This Topic: https://lists.onap.org/mt/75393481/21656
Group Owner: onap-tsc+ow...@lists.onap.org
Unsubscribe: https://lists.onap.org/g/onap-tsc/leave/2743226/1412191262/xyzzy  
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
Title: Tests results - ONAP Certificates expiration page

ONAP Certificates

Node ports

Component Port Expected Expiration Date Remaining Days Root CA Root CA Validity
aaf-gui 30251 2021-07-06 01:03:12 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai 30233 2021-03-17 20:28:56 254 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai-sparky-be 30220 2021-03-17 20:28:56 254 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
appc 30230 2029-07-15 19:49:01 3296 C=US;ST=NJ;L=middletown;O=odl;OU=odl;CN=odl
appc-cdt 30289 2022-03-18 21:30:53 620 C=US;L=Default City;O=ONAP;OU=APPC;CN=cdt
appc-dgbuilder 30228 2019-09-01 14:26:24 -310 C=US;ST=Some-State;O=Internet Widgits Pty Ltd;CN=dgbuilder
cdash-kibana 30290 2021-02-04 12:23:52 212 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
cds-ui 30497 2021-02-18 10:41:56 226 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
clamp-external 30258 2021-02-04 12:23:52 212 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
cli 30260 2047-07-08 10:29:38 9862 C=IN;ST=KA;L=BLR;O=CLI;CN=onap
cli 30271 2047-07-08 10:29:38 9862 C=IN;ST=KA;L=BLR;O=CLI;CN=onap
dashboard 30418 2021-07-06 01:22:13 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-bc 30242 2021-07-06 01:05:58 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-dr-node-external 30494 2021-07-06 01:12:06 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-dr-prov 30269 2021-07-06 01:05:49 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
message-router-external 30226 2021-03-25 04:23:49 261 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
msb-eag 30284 2022-05-13 02:22:27 675 C=CN;ST=sichuang;L=chengdu;O=zte;OU=zenap;CN=ZTE OpenPalette Root Certificate Authority 2017
msb-iag 30283 2022-05-13 02:22:27 675 C=CN;ST=sichuang;L=chengdu;O=zte;OU=zenap;CN=ZTE OpenPalette Root Certificate Authority 2017
music 30407 2021-02-03 16:21:00 211 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
nbi 30274 2021-07-06 01:12:32 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
oof-has-api 30275 2021-04-04 18:43:16 272 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
oof-osdf 30248 2021-04-04 18:43:16 272 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
pap 30219 2021-03-17 23:10:40 254 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
pap 30218 2021-03-17 23:10:40 254 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
portal-app 30225 2021-07-06 01:30:41 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
portal-sdk 30212 2021-07-06 01:19:13 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
refrepo 30297 2020-06-20 11:50:35 -17 C=IN;ST=Bangalore;L=Bangalore;O=Global Security;OU=ONAP;CN=example.com
robot 30209 2030-03-28 14:39:39 3551 C=US;ST=NJ;L=Middletown;O=ONAP;OU=robot;CN=robot-onap.onap.org;emailAddress=ro...@onap.org
sdc-be-external 30204 2021-03-24 13:38:23 260 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-dcae-dt 30266 2021-03-24 13:38:23 260 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-dcae-fe 30264 2021-03-24 13:38:23 260 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-fe 30207 2021-03-24 13:38:23 260 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-wfd-be 30257 2021-03-24 13:38:23 260 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-wfd-fe 30256 2021-03-24 13:38:23 260 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdnc 30267 2021-07-06 01:15:42 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdnc-dgbuilder 30203 2019-09-01 14:26:24 -310 C=US;ST=Some-State;O=Internet Widgits Pty Ltd;CN=dgbuilder
so-vnfm-adapter 30406 2020-07-18 15:27:09 11 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
uui 30398 2030-03-01 08:14:29 3524 C=cn;L=Beijing;O=ChinaMobile;OU=Development;CN=Usecaseui Server
uui-server 30399 2030-01-08 14:25:51 3472 C=cn;L=Beijing;O=ChinaMobile;OU=Development;CN=Usecaseui Server
vid 30200 2021-03-17 15:13:49 253 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
xdcae-ves-collector 30417 2021-07-06 01:21:33 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9

Node ports SSL errors

Component Port Error Details
aai-babel 30279 [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1108)
netbox-nginx 30420 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1108)
so 30277 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:1108)
xdcae-hv-ves-collector 30222 [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:1108)

Node ports Connection errors

Component Port Error Details
aai-modelloader 30210 [Errno 111] Connection refused
appc 30231 [Errno 111] Connection refused
awx-web 30478 [Errno 111] Connection refused
message-router-kafka-0 30490 [Errno 111] Connection refused
message-router-kafka-1 30491 [Errno 111] Connection refused
message-router-kafka-2 30492 [Errno 111] Connection refused
sdnc-portal 30201 [Errno 111] Connection refused
Title: Tests results - ONAP Certificates expiration page

ONAP Certificates

Internal ports

Component Port Expected Expiration Date Remaining Days Root CA Root CA Validity
aaf-cm 8150 2021-07-08 02:01:33 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aaf-gui 8200 2021-07-08 02:04:49 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aaf-locate 8095 2021-07-08 02:00:03 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aaf-oauth 8140 2021-07-08 02:01:36 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aaf-service 8100 2021-07-08 01:53:18 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aaf-sms 10443 2021-07-08 02:03:34 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai 8443 2021-03-17 20:28:56 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai-graphadmin 8449 2021-03-17 20:28:56 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai-resources 8447 2021-03-17 20:28:56 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai-schema-service 8452 2021-03-17 20:28:56 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai-sparky-be 8000 2021-03-17 20:28:56 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
aai-traversal 8446 2021-03-17 20:28:56 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
appc 8443 2029-07-15 19:49:01 3294 C=US;ST=NJ;L=middletown;O=odl;OU=odl;CN=odl
appc-cdt 18080 2022-03-18 21:30:53 618 C=US;L=Default City;O=ONAP;OU=APPC;CN=cdt
appc-dgbuilder 3000 2019-09-01 14:26:24 -312 C=US;ST=Some-State;O=Internet Widgits Pty Ltd;CN=dgbuilder
cds-ui 3000 2021-02-18 10:41:56 224 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
clamp 8443 2021-02-04 12:23:52 210 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
clamp-backend 443 2021-02-04 12:23:52 210 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
cli 443 2047-07-08 10:29:38 9860 C=IN;ST=KA;L=BLR;O=CLI;CN=onap
cli 9090 2047-07-08 10:29:38 9860 C=IN;ST=KA;L=BLR;O=CLI;CN=onap
dcae-cloudify-manager 443 2021-07-08 02:03:43 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-bc 8443 2021-07-08 02:03:39 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-dr-node 8443 2021-07-08 02:08:17 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-dr-node-external 8443 2021-07-08 02:08:17 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
dmaap-dr-prov 443 2021-07-08 02:03:23 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
drools 6969 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
drools 9696 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
ejbca 8443 2022-07-08 02:07:51 729 UID=c-045bc1b7c0d9632f3;CN=ManagementCA;O=EJBCA Container Quickstart
esr-server 9518 2018-06-10 08:05:37 -760 C=aaiesr;ST=aaiesr;L=aaiesr;O=aaiesr;OU=aaiesr;CN=aaiesr
holmes-engine-mgmt 9102 2019-02-23 07:04:35 -502 C=cn;ST=sichuan;L=chengdu;O=onap;OU=www.onap.org;CN=onap
holmes-rule-mgmt 9101 2019-02-23 07:04:35 -502 C=cn;ST=sichuan;L=chengdu;O=onap;OU=www.onap.org;CN=onap
holmes-rule-mgmt 9104 2019-11-05 06:26:29 -247 C=CN;ST=Sichuan;L=Chengdu;O=ONAP;OU=ONAP;CN=HOLMES;emailAddress=fu.guangr...@zte.com.cn
message-router 3905 2021-03-25 04:23:49 259 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
message-router-external 3905 2021-03-25 04:23:49 259 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
msb-eag 443 2022-05-13 02:22:27 673 C=CN;ST=sichuang;L=chengdu;O=zte;OU=zenap;CN=ZTE OpenPalette Root Certificate Authority 2017
msb-iag 443 2022-05-13 02:22:27 673 C=CN;ST=sichuang;L=chengdu;O=zte;OU=zenap;CN=ZTE OpenPalette Root Certificate Authority 2017
multicloud-fcaps 9011 2027-03-15 02:08:14 2440 C=CN;ST=sichuang;L=chengdu;O=zte;OU=zenap;CN=ZTE OpenPalette Root Certificate Authority 2017
multicloud-starlingx 9009 2027-03-15 02:08:14 2440 C=CN;ST=sichuang;L=chengdu;O=zte;OU=zenap;CN=ZTE OpenPalette Root Certificate Authority 2017
music 8443 2021-02-03 16:21:00 209 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
nbi 8443 2021-07-08 02:14:04 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
oof-cmso-optimizer 7997 2021-04-04 18:43:16 270 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
oof-cmso-ticketmgt 7999 2021-04-04 18:43:16 270 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
oof-cmso-topology 7998 2021-04-04 18:43:16 270 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
oof-has-api 8091 2021-04-04 18:43:16 270 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
pdp 8081 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
policy-apex-pdp 6969 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
policy-api 6969 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
policy-distribution 6969 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
policy-xacml-pdp 6969 2021-03-17 23:10:40 252 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
portal-app 8443 2021-07-08 02:35:36 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
portal-sdk 8443 2021-07-08 02:22:01 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
robot 443 2030-03-28 14:39:39 3549 C=US;ST=NJ;L=Middletown;O=ONAP;OU=robot;CN=robot-onap.onap.org;emailAddress=ro...@onap.org
sdc-be 8443 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-be-external 8443 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-dcae-dt 9446 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-dcae-fe 9444 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-fe 9443 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-onboarding-be 8445 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-wfd-be 8443 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdc-wfd-fe 8443 2021-03-24 13:38:23 258 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdnc 8443 2021-07-08 02:19:54 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
sdnc-dgbuilder 3000 2019-09-01 14:26:24 -312 C=US;ST=Some-State;O=Internet Widgits Pty Ltd;CN=dgbuilder
sdnrdb 9200 2021-07-08 02:12:54 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
so-vnfm-adapter 9092 2020-07-18 15:27:09 9 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
uui 8443 2030-03-01 08:14:29 3522 C=cn;L=Beijing;O=ChinaMobile;OU=Development;CN=Usecaseui Server
uui-server 8082 2030-01-08 14:25:51 3470 C=cn;L=Beijing;O=ChinaMobile;OU=Development;CN=Usecaseui Server
vid 8443 2021-03-17 15:13:49 251 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9
xdcae-ves-collector 8443 2021-07-08 02:32:03 364 C=US;O=ONAP;OU=OSAAF;CN=intermediateCA_9

Node ports SSL errors

Component Port Error Details
aaf-fs 8096 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
aai-babel 9516 [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:852)
aai-elasticsearch 9200 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
aai-search-data 9509 [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:852)
appc-ansible-server 8000 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
cds-command-executor 50051 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
cds-py-executor 50052 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
cds-sdc-listener 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
consul-server-ui 8500 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcae-healthcheck 80 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcae-hv-ves-collector 6061 [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:852)
dcae-prh 8100 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcae-tcagen2 9091 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcae-ves-collector 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcaemod-designtool 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcaemod-distributor-api 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcaemod-genprocessor 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcaemod-nifi-registry 18080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcaemod-onboarding-api 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dcaemod-runtime-api 9090 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
dmaap-dr-node 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
ejbca 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
esr-gui 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
message-router 3904 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
modeling-etsicatalog 8806 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
msb-consul 8500 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
msb-discovery 10081 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
multicloud-k8s 9015 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
multicloud-k8s-etcd 2380 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
music-cassandra 9042 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
netbox-nginx 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
nexus 8081 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
portal-db 3306 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
portal-widget 8082 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
sdc-dcae-tosca-lab 8085 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
sdnc-ansible-server 8000 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-bpmn-infra 8081 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-catalog-db-adapter 8082 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-nssmf-adapter 8088 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-openstack-adapter 8087 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-request-db-adapter 8083 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-sdc-controller 8085 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-sdnc-adapter 8086 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
so-vfc-adapter 8084 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-ems-driver 8206 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-generic-vnfm-driver 8484 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-huawei-vnfm-driver 8482 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-juju-vnfm-driver 8483 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-multivim-proxy 8481 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-nokia-v2vnfm-driver 8089 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-nslcm 8403 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-redis 3306 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-resmgr 8480 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-vnflcm 8801 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-vnfmgr 8803 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-vnfres 8802 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-workflow 10550 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-workflow-engine 8080 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-zte-sdnc-driver 8411 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
vfc-zte-vnfm-driver 8410 [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:852)
xdcae-hv-ves-collector 6061 [SSL: SSLV3_ALERT_BAD_CERTIFICATE] sslv3 alert bad certificate (_ssl.c:852)

Node ports Connection errors

Component Port Error Details
aaf-cert-service 8443 [Errno 111] Connection refused
aaf-hello 8130 [Errno 111] Connection refused
aai-graphadmin 5005 [Errno 111] Connection refused
aai-modelloader 8080 [Errno 111] Connection refused
aai-resources 5005 [Errno 111] Connection refused
aai-schema-service 5005 [Errno 111] Connection refused
aai-traversal 5005 [Errno 111] Connection refused
appc 1830 [Errno 111] Connection refused
appc-cluster 2550 [Errno 111] Connection refused
clamp-external 2443 [Errno 111] Connection refused
policy-pap 6969 [Errno 111] Connection refused
portal-cassandra 9160 [Errno 111] Connection refused
sdc-be 8080 [Errno 111] Connection refused
sdc-dcae-be 8082 [Errno 111] Connection refused
sdc-onboarding-be 8081 [Errno 111] Connection refused
sdnc-cluster 2550 [Errno 111] Connection refused
sdnc-oam 8282 [Errno 111] Connection refused
sdnc-portal 8443 [Errno 111] Connection refused
sdnrdb-service 9300 [Errno 111] Connection refused
vid-http 8080 [Errno 111] Connection refused

Node ports Connections Error

Component Port Error Details
aaf-cass 7000 [Errno 104] Connection reset by peer
cassandra 7000 [Errno 104] Connection reset by peer
message-router-kafka 9092 [Errno 104] Connection reset by peer

Reply via email to