As part of the IBM PMR - TS0022011993, need to add SNI functionality for HMC's

From: aix_support@ecurep.ibm.com [mailto:aix_support@ecurep.ibm.com]
Sent: Tuesday, 7 May 2019 12:53 AM
To: Balamurugan Viswanathan
Cc: Abhijit Debnath2; Madhubabu Singamala1; Roshan Naran; Shine Ouseph; Westpac Gd Vio India; Bhati, Kuldeep; Nepomuceno, Romel
Subject: Re: Fw: Re: TS002201993

All,

Are you using a bluecoat proxy? SNI is not supported on the HMC currently, but you can open an RFE to request an enhancement to add that functionality :

https://www.ibm.com/developerworks/rfe/


From the ecc trace logs, the latest attempt was reset by the proxy :

<environment>ecc version: 2.0301. ecc build date: 03/03/2017 01:33 PM. Java version: IBM Corporation 1.8.0. OS version: Linux 3.10.0-862.6.3.el7_1.hmc8_1p.2.x86_64</environment>
<message> Remote exception from web service call:</message>
<exception>
<error>WSWS3713E: Connection to the remote host wbcorp-pr-proxy0.westpac.com.au:8080 failed.Received the following error: java.io.IOException: Connection reset by peer</error>


Have you tried the curl commands? You will need root access, to gain root :

ssh in as hscpe user
enter your hscpe password
run 'pesh <SN or UVMID>'
enter the password of the day listed below
su -
enter your root password

05/06/2019 - 6b45a1a7
05/07/2019 - 594eb720
05/08/2019 - 3d582f2e


Then please run below commands :

curl --proxy <https://proxy ip address:port> http://129.42.56.189 -k
curl --proxy <https://proxy ip address:port> http://129.42.60.189 -k
curl --proxy <https://proxy ip address:port> http://129.42.54.189 -k

If the curl commands fail, you will need to work with your networking team to resolve the connectivity to our servers. It might be worth gathering a tcpdump while attempting a test call home. You can use ( as root ) the below command to start the dump :

tcpdump -i any -s 0 -w /tmp/failingCallHome.tcpdump

Then ctrl+c after the test call home has finished. Additional information on HMC connectivity can be found in the white paper : https://www-01.ibm.com/support/docview.wss?uid=isg3T7000236&aid=1

Specifically under the section “Appendix: IP address…”

Feel free to contact us with any question or concerns in the meantime.

Regards,

Zachary Thaxton
HMC Product Engineering