1 Reply Latest reply: Jul 30, 2012 4:50 AM by user12629685 RSS

    SGD Gateway refuses new connections

    Danu-Oracle
      I have a customer using SGD 4.5 and after a gateway restart everything is working OK. Then after a period of time (sometime hours or sometime it is days) the gateway does not allow new connections. Existing connections are not impacted. Looking in the routing proxy log we see errors like:

      ----------------------------
      INFO: NOT FOR PRODUCTION USE.

      Jul 10, 2012 2:00:16 AM JARP main

      INFO: Running...

      Jul 10, 2012 6:30:51 AM proxy.Route run

      INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:SGD <- SSL <- Router, To: TCP] timed out. Restart

      ing.

      Jul 10, 2012 8:12:07 AM proxy.Route run

      INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:SGD <- SSL <- Router, To: TCP] timed out. Restart

      ing.

      Jul 10, 2012 11:31:51 AM proxy.Route run

      INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:* <- SSL, To: TCP:localhost:8081] error. Restarti

      ng.

      Jul 10, 2012 11:31:51 AM proxy.Route run

      INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:* <- SSL, To: TCP:localhost:8081] error. Restarti

      ng.

      Jul 10, 2012 11:31:51 AM async.channel.tcp.AsyncTcpChannelClient$ConnectOp run

      INFO: finishConnect() exception: java.net.ConnectException: Connection refused

      Jul 10, 2012 11:31:51 AM proxy.Route run

      INFO: Error: Route Route [From: TCP:*:443 <- SSLFilter:* <- SSL, To: TCP:localhost:8081] error. Restarti

      ng.
      ----------------------

      On running "tarantella gateway list" on the SGD server we see that certificates have expired.

      They have 2 active gateways running. If we run "gateway sslcert print" on both the servers we get the following:

      one server

      <hostA>:/opt/SUNWsgdg/bin # ./gateway sslcert print

      keytool error: java.lang.Exception: Alias <hostA> does not exist
      ERROR: failed to print certificate (status 1)

      on the second gateway response was clear certifcate but the date of the certificate has expired.

      Questions:
      1) Has someone encountered this problem? If yes ,what was the solution?
      2) Is it the certificate problem an issue and if we sort it out would it solve the connections issue? Also why does this problem go away (for a while at least) after the restart of the gateway?
        • 1. Re: SGD Gateway refuses new connections
          user12629685
          What is the version of jarp.jar?

          cd /opt/SUNWsgdg/proxy
          /opt/SUNWsgdg/java/default/bin/java -jar jarp.jar --version