Re: Cannot start app in new vsphere cf deployment


CF Runtime
 

Hi Ramesh,

Looking at the original logs you provided, we see the following error when
the CC tries to talk to HM9000:

"SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B:
certificate verify failed"

We're assuming that your certificate used by ha_proxy is a self signed
cert? Setting the "ssl.skip_cert_verify" to true in your manifest should
make the CC ignore the fact that it is self signed.

Joseph & Dan
OSS Release Integration team

On Mon, Sep 14, 2015 at 9:03 AM, Ramesh Sambandan <rsamban(a)gmail.com> wrote:

Amit,

Below are my cf trace output.
guests-MacBook-Pro:apps rsamban$ cf logs gs --recent

REQUEST: [2015-09-14T09:39:28-06:00]
GET
/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/apps?q=name%3Ags&inline-relations-depth=1
HTTP/1.1
Host: api.192.168.1.103.xip.io
Accept: application/json
Authorization: [PRIVATE DATA HIDDEN]
Content-Type: application/json
User-Agent: go-cli 6.12.3-c0c9a03 / darwin



RESPONSE: [2015-09-14T09:39:28-06:00]
HTTP/1.1 200 OK
Content-Length: 5311
Content-Type: application/json;charset=utf-8
Date: Mon, 14 Sep 2015 15:39:28 GMT
Server: nginx
X-Cf-Requestid: 3d46e09a-5ef4-4f0d-5793-8d145a1b91a2
X-Content-Type-Options: nosniff
X-Vcap-Request-Id:
eab0cd51-7f04-4745-6ebf-0461df755620::4395680b-f74f-4325-a952-6d9fb974e3ce

{
"total_results": 1,
"total_pages": 1,
"prev_url": null,
"next_url": null,
"resources": [
{
"metadata": {
"guid": "48d31982-7e60-4de2-9d33-fdbf291ec779",
"url": "/v2/apps/48d31982-7e60-4de2-9d33-fdbf291ec779",
"created_at": "2015-09-14T13:15:50Z",
"updated_at": "2015-09-14T14:02:52Z"
},
"entity": {
"name": "gs",
"production": false,
"space_guid": "6ecadc21-314d-4f93-8afb-b646cd384826",
"stack_guid": "4d62cffe-549a-4952-8fe7-977cc2d562d8",
"buildpack": null,
"detected_buildpack": "java-buildpack=v3.1.1-
https://github.com/cloudfoundry/java-buildpack#7a538fb java-main
open-jdk-like-jre=1.8.0_60 open-jdk-like-memory-calculator=1.1.1_RELEASE
spring-auto-reconfiguration=1.10.0_RELEASE",
"environment_json": {

},
"memory": 1024,
"instances": 1,
"disk_quota": 1024,
"state": "STARTED",
"version": "40963450-8b7d-4478-bb84-682dee103a08",
"command": null,
"console": false,
"debug": null,
"staging_task_id": "0bd355ee625b4f1e814b7e1bc4cd0157",
"package_state": "STAGED",
"health_check_type": "port",
"health_check_timeout": null,
"staging_failed_reason": "StagingTimeExpired",
"staging_failed_description": null,
"diego": false,
"docker_image": null,
"package_updated_at": "2015-09-14T13:16:04Z",
"detected_start_command":
"CALCULATED_MEMORY=$($PWD/.java-buildpack/open_jdk_jre/bin/java-buildpack-memory-calculator-1.1.1_RELEASE
-memorySizes=metaspace:64m..
-memoryWeights=heap:75,metaspace:10,stack:5,native:10
-totMemory=$MEMORY_LIMIT) && SERVER_PORT=$PORT
$PWD/.java-buildpack/open_jdk_jre/bin/java -cp
$PWD/.:$PWD/.java-buildpack/spring_auto_reconfiguration/spring_auto_reconfiguration-1.10.0_RELEASE.jar
-Djava.io.tmpdir=$TMPDIR
-XX:OnOutOfMemoryError=$PWD/.java-buildpack/open_jdk_jre/bin/killjava.sh
$CALCULATED_MEMORY org.springframework.boot.loader.JarLauncher",
"enable_ssh": true,
"docker_credentials_json": {
"redacted_message": "[PRIVATE DATA HIDDEN]"
},
"space_url": "/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826",
"space": {
"metadata": {
"guid": "6ecadc21-314d-4f93-8afb-b646cd384826",
"url": "/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826",
"created_at": "2015-09-14T13:14:52Z",
"updated_at": null
},
"entity": {
"name": "dev",
"organization_guid": "6ee4b17e-ca40-47f2-b949-c7692324112a",
"space_quota_definition_guid": null,
"allow_ssh": true,
"organization_url":
"/v2/organizations/6ee4b17e-ca40-47f2-b949-c7692324112a",
"developers_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/developers",
"managers_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/managers",
"auditors_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/auditors",
"apps_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/apps",
"routes_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/routes",
"domains_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/domains",
"service_instances_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/service_instances",
"app_events_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/app_events",
"events_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/events",
"security_groups_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826/security_groups"
}
},
"stack_url": "/v2/stacks/4d62cffe-549a-4952-8fe7-977cc2d562d8",
"stack": {
"metadata": {
"guid": "4d62cffe-549a-4952-8fe7-977cc2d562d8",
"url": "/v2/stacks/4d62cffe-549a-4952-8fe7-977cc2d562d8",
"created_at": "2015-09-14T05:55:54Z",
"updated_at": null
},
"entity": {
"name": "cflinuxfs2",
"description": "Cloud Foundry Linux-based filesystem"
}
},
"events_url":
"/v2/apps/48d31982-7e60-4de2-9d33-fdbf291ec779/events",
"service_bindings_url":
"/v2/apps/48d31982-7e60-4de2-9d33-fdbf291ec779/service_bindings",
"service_bindings": [

],
"routes_url":
"/v2/apps/48d31982-7e60-4de2-9d33-fdbf291ec779/routes",
"routes": [
{
"metadata": {
"guid": "4b3968ca-8821-496b-b4e9-47b54303f92f",
"url": "/v2/routes/4b3968ca-8821-496b-b4e9-47b54303f92f",
"created_at": "2015-09-14T13:15:50Z",
"updated_at": null
},
"entity": {
"host": "gs",
"path": "",
"domain_guid": "a6cc2662-2771-4737-89de-992a2d606997",
"space_guid": "6ecadc21-314d-4f93-8afb-b646cd384826",
"domain_url":
"/v2/domains/a6cc2662-2771-4737-89de-992a2d606997",
"space_url":
"/v2/spaces/6ecadc21-314d-4f93-8afb-b646cd384826",
"apps_url":
"/v2/routes/4b3968ca-8821-496b-b4e9-47b54303f92f/apps"
}
}
]
}
}
]
}
Connected, dumping recent logs for app gs in org yesVin / space dev as
admin...


REQUEST: [2015-09-14T09:39:29-06:00]
POST /oauth/token HTTP/1.1
Host: login.192.168.1.103.xip.io
Accept: application/json
Authorization: [PRIVATE DATA HIDDEN]
Content-Type: application/x-www-form-urlencoded
User-Agent: go-cli 6.12.3-c0c9a03 / darwin


grant_type=refresh_token&refresh_token=eyJhbGciOiJSUzI1NiJ9.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.GLBJ3Px81ccR76QppqDF0ilyvxeXQO21j-XwOUVbQTllg3h8nLgPHShMDOuy7eOecBhJUSLbesahJME196LHYZYV1iOad9WhNASO11gdfqJ_0rTEGwZQEzwY2q9ggaoAv_YUjAmZOYCM8052K6LdKtROOqFd67CdTdrC0L8K1eo&scope=

RESPONSE: [2015-09-14T09:39:31-06:00]
HTTP/1.1 200 OK
Transfer-Encoding: chunked
Access-Control-Allow-Origin: *
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Cache-Control: no-store
Content-Type: application/json;charset=UTF-8
Date: Mon, 14 Sep 2015 15:39:31 GMT
Expires: 0
Pragma: no-cache
Pragma: no-cache
Server: Apache-Coyote/1.1
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Cf-Requestid: 8c1688dd-2a9e-4b44-4075-a84e88f5d6cd
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block

872
{"access_token":"[PRIVATE DATA
HIDDEN]","token_type":"bearer","refresh_token":"[PRIVATE DATA
HIDDEN]","expires_in":599,"scope":"cloud_controller.read password.write
cloud_controller.write openid doppler.firehose scim.write scim.read
cloud_controller.admin","jti":"33c5626e-eb4c-459a-9a2c-f38295a80a22"}
0


FAILED
Unauthorized error: You are not authorized. Error: Invalid authorization
FAILED
Unauthorized error: You are not authorized. Error: Invalid authorization

Let me know

thanks
-Ramesh

Join cf-bosh@lists.cloudfoundry.org to automatically receive all group messages.