Not able to connect DT client to the running instance

Question

Not able to connect DT client to the running instance

amit4aws opened this issue 5 years ago · 1 comments

Hi,
I have been struggling for long time to make appmon work for my containerized applications and so far i had no luck. In my latest attempt when i run the docker compose by providing the license , i can ps on the process and see collector ,server and agent running but i can not connect my DT client to it. My PS command returned the following :-

b7fc86a4e87a dynatrace/server:7.0 "sh -c '${DT_HOME}/p…" 10 minutes ago Up 10 minutes 0.0.0.0:2021->2021/tcp, 0.0.0.0:6699->6699/tcp, 0.0.0.0:8020-8021->8020-8021/tcp, 0.0.0.0:8023->8023/tcp, 0.0.0.0:8040-8041->8040-8041/tcp, 0.0.0.0:9911->9911/tcp dtserver
04301c8fb958 dynatrace/collector:7.0 "sh -c ${DT_HOME}/ru…" 10 minutes ago Up 10 minutes 0.0.0.0:8042-8043->8042-8043/tcp, 0.0.0.0:9998->9998/tcp dtcollector
manh@alvd-lcoaomni01:~$ docker ps|grep dynatrace
b7fc86a4e87a dynatrace/server:7.0 "sh -c '${DT_HOME}/p…" 10 minutes ago Up 10 minutes 0.0.0.0:2021->2021/tcp, 0.0.0.0:6699->6699/tcp, 0.0.0.0:8020-8021->8020-8021/tcp, 0.0.0.0:8023->8023/tcp, 0.0.0.0:8040-8041->8040-8041/tcp, 0.0.0.0:9911->9911/tcp dtserver
04301c8fb958 dynatrace/collector:7.0 "sh -c ${DT_HOME}/ru…" 10 minutes ago Up 10 minutes 0.0.0.0:8042-8043->8042-8043/tcp, 0.0.0.0:9998->9998/tcp dtcollector
4d51f1a264b3 dynatrace/agent:7.0

Also clinet keeps on throwing the error enable to connect the server on port 2021. Any idea what else i can be looking at ? Any guidance would be of great help

Answer 1 · 2020-03-12T11:21:45.000Z

I looked at the startup logs and seeing the following certificate related errors 👎

dtcollector | 2020-03-12 00:45:47 SEVERE [ImportCertificateStrategy] certificate is expired and not already accepted for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:47 SEVERE [ImportCertificateStrategy] client did not accepted ssl client certificates. will not establish trust for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:47 SEVERE [MessageBroker] Failed to send CLUSTER_TIME message (target-type=SERVER, target-id=0), uri=null - CommunicationException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: client did not accepted ssl client certificates. will not establish trust for [collector_client]

dtcollector | 2020-03-12 00:45:47 SEVERE [ImportCertificateStrategy] certificate is expired and not already accepted for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:47 SEVERE [ImportCertificateStrategy] client did not accepted ssl client certificates. will not establish trust for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:47 SEVERE [MessageBroker] Failed to send CLUSTER_TIME message (target-type=SERVER, target-id=0), uri=null - CommunicationException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: client did not accepted ssl client certificates. will not establish trust for [collector_client]

dtcollector | 2020-03-12 00:45:47 WARNING [ClusterTimeProvider] Exception synchronizing cluster time: COMMUNICATION_ERROR [log message will be suppressed for 1 hours]

dtcollector | 2020-03-12 00:45:47 INFO [DtangAdapter] dtang adapter started on collector dtcollector@dtcollector.dynatracedocker_appmon

dtcollector | 2020-03-12 00:45:47 INFO [Collector] Collector started.

dtcollector | 2020-03-12 00:45:49 INFO [WatchDog] Connected successfully to native watchdog on 127.0.0.1:50000

dtcollector | 2020-03-12 00:45:49 [c8e9188e] info [native] New connection on port 50000 received

dtcollector | 2020-03-12 00:45:49 [c8e9188e] info [native] Dynatrace Collector started successfully

dtcollector | 2020-03-12 00:45:57 SEVERE [ImportCertificateStrategy] certificate is expired and not already accepted for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:57 SEVERE [ImportCertificateStrategy] client did not accepted ssl client certificates. will not establish trust for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:57 SEVERE [MessageBroker] Failed to send CLUSTER_TIME message (target-type=SERVER, target-id=0), uri=null - CommunicationException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: client did not accepted ssl client certificates. will not establish trust for [collector_client]

dtcollector | 2020-03-12 00:45:57 SEVERE [ImportCertificateStrategy] certificate is expired and not already accepted for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:57 SEVERE [ImportCertificateStrategy] client did not accepted ssl client certificates. will not establish trust for [collector_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:57 SEVERE [MessageBroker] Failed to send CLUSTER_TIME message (target-type=SERVER, target-id=0), uri=null - CommunicationException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateExpiredException: client did not accepted ssl client certificates. will not establish trust for [collector_client]

dtcollector | 2020-03-12 00:45:57 SEVERE [ImportCertificateStrategy] certificate is expired and not already accepted for [dtserver:6699_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:57 SEVERE [ImportCertificateStrategy] client did not accepted ssl client certificates. will not establish trust for [dtserver:6699_client]: NotAfter: Thu Mar 07 10:37:35 GMT 2019

dtcollector | 2020-03-12 00:45:57 WARNING [DynaTraceSSLSocketFactory] Unable to connect to dtserver:6699 probably untrusted certificate: java.security.cert.CertificateExpiredException: client did not accepted ssl client certificates. will not establish trust for [dtserver:6699_client]

dtcollector | 2020-03-12 00:45:57 WARNING [DefaultConnectionEstablisherJob] exception was thrown while connecting: unable to establish connection to dtserver:6699 due a java.io.EOFException: unable to establish connection to dtserver:6699

When i do docker ps i can see server,agent,collector running :-

45bb443573fb dynatrace/server:7.0 "sh -c '${DT_HOME}/p…" 10 hours ago Up 5 minutes 0.0.0.0:2021->2021/tcp, 0.0.0.0:6699->6699/tcp, 0.0.0.0:8020-8021->8020-8021/tcp, 0.0.0.0:8023->8023/tcp, 0.0.0.0:8040-8041->8040-8041/tcp, 0.0.0.0:9911->9911/tcp dtserver

b828efb86b93 dynatrace/agent:7.0 "/bin/sh -c 'while t…" 10 hours ago Up 5 minutes dtagent

5e776c97be4c dynatrace/collector:7.0 "sh -c ${DT_HOME}/ru…" 10 hours ago Up 5 minutes 0.0.0.0:8042-8043->8042-8043/tcp, 0.0.0.0:9998->9998/tcp dtcollector