roxy
roxy copied to clipboard
SSL certificate template selection gets disabled during Modules deployment
On behalf of @ArunPrakashThangavelu (https://github.com/grtjn/roxy/commit/5ac49a46584024e9f19de199d9decc06c6d39fba): I have upgraded our system to ML 8.0-6.6 and got CSRF Token validity error while trying Roxy deployment. To resolve this, i have copied the latest roxy code from Master and also the latest copy of the above server_config.rb. I'm getting a new error like below when i run deploy modules, I have verified the MarkLogic and found that the SSL certificate template selection gets disabled during Modules deployment. Do you have any idea how to resolve this?
[GET] https://itgsydapd654.macbank:8002/manage/LATEST/servers?format=xml
Closing HTTPS connection to itgsydapd654.macbank:8000
[POST] https://itgsydapd654.macbank:8000/v1/eval
Closing HTTPS connection to itgsydapd654.macbank:8002
Loading REST properties in C:/Users/aprakas2/Documents/nds/ml-pipeline/roxy/rest-api/config/properties.xml
[PUT] https://itgsydapd654.macbank:8060/v1/config/properties
Roxy::Http : request failure count: 1, exception: #<OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol>
Roxy::Http : request failure count: 2, exception: #<OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol>
Roxy::Http : request failure count: 3, exception: #<OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol>
Roxy::Http : request failure count: 4, exception: #<OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol>
Roxy::Http : re-raising same error: itgsydapd654.macbank temporarily unavailable: (SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol) -- error count: 4, error age: 0
ERROR: itgsydapd654.macbank temporarily unavailable: (SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: unknown protocol)
@ArunPrakashThangavelu:
Did you manually copy Roxy code, or did you use ./ml upgrade --branch=master? The latter should be sufficient.
Can you also share the output of running deploy modules with the -v flag?
Yes, i have copied it manually as we cannot do the ./ml upgrade due to proxy issues. I have attached the output of deploy modules. logs_modules_deployment.txt
You are connecting to the rest-api on 8060 using https, but is that app-server configured for https access?