cnMaestro on premises self-signed cert problem

Products cnMaestro
1

I recently setup Cabmium's on premises cnMaestro within our internal network.  I was excited to find Cabmium had an on premises version since our ePMPs are on a private network we don't want open to the Internet.  The problems I'm having now is getting ePMPs to onboard.  Connectivity between the server and the ePMP is okay, tested that with the Ping tool in the web GUI.  What I'm noticing in the logs is that the ePMP won't validate the self-signed certificate.  This isn't something we want to get an SA for so we were hoping there were some work arounds available.  Any help would be appreciated!  Below is the syslog output on the ePMP as well:

Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: EINPROGRESS in connect()
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: SSL_ERROR_WANT_READ try again
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: Server certificated validation failed errno = 18, err =  self signed certificate
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: Got 'X509_verify_cert failed' for hostname '10.5.10.65' and certificate:
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: SSL_ERROR_WANT_READ try again
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: server's cert didn't look good 29
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: Not able to find cnMaestro, Try Discovering again
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: Discovery of cnMaestro Failed 
Jul  7 17:18:15 Dewitt West ePMP DEVICE-AGENT[21653]: Unable to discover cnMaestro
2

Just wanted to make sure your ePMP devices were running version 2.6.2, which is the minimum requirement.

3

This was done with 2.6.1.  I upgraded an SM to 2.6.2 to test, and it did successfully adopt the device.  I appologize for bothering you with such a trivial fix.  I thought I read in other documenation that 2.6.1 was the minimum requirement, but I must have been mistaken.  Good to go here.

4

Great

All the min supported device version comes along with On-Premises box. You can go and check the Operate->Software Update->Manage Images page .

We have also mentioned in the release notes.

Thanks
Rupam

1 Like