DX Unified Infrastructure Management

Hi,

I came across some issue while configuring Hubs in SSL mode only.

We have configured Primary and collector hub in SSL mode only, problem is that sometimes alarm queue is not flowing and sometimes QoS queue is not flowing. Is there any setting we need to follow while setting up hubs in SSL mode? Please let me know.

The primary hub must be at SSL mode 0. Beginning with v7.70, a hub at SSL mode 0 cannot communicate directly with a hub at SSL mode 2.
Java probes do not support SSL mode 1 or SSL mode 2.

https://docops.ca.com/ca-unified-infrastructure-management-probes/ga/en/alphabetical-probe-articles/hub/hub-release-notes#hubReleaseNotes-SSLCommunicationMode

thank you. we deployed latest hot fix and issue is fixed

If you see error messages like below in the hub.log,

hub: CTRL HSH select() ERROR 10022
hub: ssl_server_wait - SSL_accept timeout on new SSL connection
hub: ssl_server_wait - SSL_accept error (5) on new SSL connection
hub: TSESS-135020 name to IP failed for /Domain/Hub/Robot/data_engine (not found)

or

hub: SSL_shutdown on TSESS-9785: SSL connection want read

Possible causes are:

Bad certificates
- If the problem is consistent to a single hub to hub connect, try recreating the certificate.

Failed LDAP connection
- If the LDAP connection to AD is being used please check that there are no issues logging in.

Network problems
- Check that there are no alerts for the network probes between the primary and secondary hubs

Anti-virus/Intrusion prevention systems blocking
- Check that the logs for these types of products on both ends of the tunnel

thank you, David for the info. But we were not seeing these errors in log. Now issue got fixed. we deployed latest hot fix