Article ID: 119501, created on Jan 7, 2014, last review on May 10, 2014

  • Applies to:
  • Plesk Automation 11.1

Symptoms

  1. In PPA Provider Panel go to Infrastructure -> Service Nodes -> choose required service node -> when open Apache or Mail settings tab you can see error:

    SSL connection error
    

    or

    Internal error: An internal server error was encountered during the command execution on the remote host '192.168.0.1'.
    Message
    An internal server error was encountered during the command execution on the remote host '192.168.0.1'.
    File JsonRpc.php Line 263 Type Service_Agent_Exception
    
  2. Verify of SSL certificate was failed:

    [root@ppa~] openssl s_client -state -debug -showcerts -verify 0 -connect <ip_address_of_service_node>:8443 
    Depth=1 /C=US/ST=Parallels/L=Parallels/O=Parallels/OU=PPA/CN=PPA CA/emailAddress=info@parallels.com
    verify error:num=19:self signed certificate in certificate chain
    verify return:0
    write to 0xfd05e00 [0xfd17450] (7 bytes => 7 (0x7))
    0000 - 15 03 01 00 02 02 30                              ......0
    SSL3 alert write:fatal:unknown CA
    SSL_connect:error in SSLv3 read server certificate B
    SSL_connect:error in SSLv3 read server certificate B
    28874:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
    

Cause

SSL certificate which has used for connection between Parallels Plesk Automation Management node and Service node was corrupted.

Resolution

Recreate required SSL certificate manually:

  1. Create new certificate for required service node:

    /usr/local/ppa/bin/agent_certmng -c -type sn -hostid <number_of_service_node>
    
  2. Two files sn_<number>.crt and sn_<number>.key will be created. Place both files in certificate file:

    cat  sn_<number>.crt sn_<number>.key > certificate
    
  3. Copy new certificate file to /opt/psa_agent/internal/certificate on required service node.

  4. Restart sw-cp-cerver service on the Service Node:

    /etc/init.d/sw-cp-server restart
    

Search Words

Service_Agent_Exception

SSL connection error

certificate verify failed

c1ecc6010feff26cb42d1d14a7881dd6 e0aff7830fa22f92062ee4db78133079 caea8340e2d186a540518d08602aa065

Email subscription for changes to this article
Save as PDF