Profile picture for user pamillet

since some months, the services do  not start automatically, and we have to run manually rc.start...

it was not a serious issue, bat this morning, i tried to understand the reasons, and i found some logs with an error WrapperSimpleAppMain| com.aris.prov.http.server.HttpServer - SSL DISabled!

We havge installed a certificat and are using SSL..

so i make a change in ACC with "set enable.ssl=true

but the result is that and it's no longer possible to start ACC...

So i cannot rollback on my acc modif...

a way to make the change set enable.ssl=false without ACC.. ???

 

 

by Martin Schröder
Badge for 'Contributor' achievement
Posted on Sat, 04/13/2019 - 11:37

Salut Pierre

you can enter the set Command into the acc config file

generated.apptypes.current.cfg 

and use it as a parameter to start acc

Regards, Martin

0
by Pierre-Alain MILLET Author
Posted on Tue, 04/16/2019 - 11:09

Thanks Martin...

i add in generated.apptypes.cfg the line "set acc config enable.ssl=false"

but i've still the same error when starting acc...

C:\Windows\system32>C:\SoftwareAG\ARIS9\server\acc\acc.bat -h localhost -c "C:\SoftwareAG\ARIS9\server\generated.apptypes.cfg"  -u Clous -p 9001 -pwd g3h31m startall

Unable to add node localhost to ensemble.

Could not connect to http://localhost:9001/rest. Make sure that an agent is runn

ing on this machine and that the specified port is correct. Also check if you us

ed the right protocol to communicate with the agent (you used HTTP, try HTTPS).

The service ARIS Agent 9.8 is not started, (although it's in autamatic mode), but when i start it mannually, the result for acc is the same...

regards,

pam

0
by Pierre-Alain MILLET Author
Posted on Tue, 04/16/2019 - 12:46

in fact, the ARIS Agent is not started even if i try manually to start the service.

0
by Patrik Siffrin
Posted on Fri, 05/17/2019 - 18:51

Hi,

ARIS has two separate SSL infrastructures. If you  say , you installed an SSL certificate and use SSL, you refer to the standard SSL infrastructure with the certificate enhanced in the loadbalancer and the SSL enabled in the ARIS modeling clients.

The ACC/Agent system has its own SSL infrastructure.

In order to enable it correctly, you need to import your certificate also in the  agent service truststore (keystore.jks), configure key alias/truststore password in the agent using an ACC and enable it at the agent side with " set enable.ssl=true ".

If this is done correctly, you have to use SSL connection with the ACC client from now on, either by using the ACC command line  switch "-SSL" or using the mentioned"set acc config enable.ssl=false " method with generated.apptypes.cfg.

Take note:

client side (ACC)  : set acc config enable.ssl=false

server side (agent service) set enable.ssl=true ".

Regarding your problem..

You enabled SSL at the agent service without the proper SSL certificate and configuration which causes the service to hang because it cannot access its SSL cert.



If you want to go back..

The is an agent.user.cfg file located at the server side (<ARIS installation directory>\server\bin\agent.user.cfg which contains all user changed values. Edit it and remove the "set enable.ssl=true" entry and restart the service

If you want to go forward... (after going back ;-)  in order to reach the ACC console again )

use "show cfg verbose " and look at the ssl.* entries telling you loction and default truststore password.



Regards

Patrik

 

0

Featured achievement

Rookie
Say hello to the ARIS Community! Personalize your community experience by following forums or tags, liking a post or uploading a profile picture.
Recent Unlocks
  • SS
  • MZ
  • Profile picture for user kbiront
  • Profile picture for user Tony Iliev
  • Profile picture for user amandeep.7.singh
  • PacMan

Leaderboard

|
icon-arrow-down icon-arrow-cerulean-left icon-arrow-cerulean-right icon-arrow-down icon-arrow-left icon-arrow-right icon-arrow icon-back icon-close icon-comments icon-correct-answer icon-tick icon-download icon-facebook icon-flag icon-google-plus icon-hamburger icon-in icon-info icon-instagram icon-login-true icon-login icon-mail-notification icon-mail icon-mortarboard icon-newsletter icon-notification icon-pinterest icon-plus icon-rss icon-search icon-share icon-shield icon-snapchat icon-star icon-tutorials icon-twitter icon-universities icon-videos icon-views icon-whatsapp icon-xing icon-youtube icon-jobs icon-heart icon-heart2 aris-express bpm-glossary help-intro help-design Process_Mining_Icon help-publishing help-administration help-dashboarding help-archive help-risk icon-knowledge icon-question icon-events icon-message icon-more icon-pencil forum-icon icon-lock