Topics

VID SO "Add VF_Module+" MSO failure #so #vid

Sarp KÖKSAL
 

Hi,

I am trying to make vFW demo. I preloaded vFW and in the last step, I was trying to “Add VF_Module+” for vFW_SINC_Module. However, it gave "MSO failure-- see log for details". In the logs of so-openstack-adapter, I saw a error related with Openstack certificate. We have Redhat Openstack and we have a certificate for Openstack. I added our Openstack's "ca.cert" file to end of so-openstack-adapter's "/etc/ssl/cert.pem" file. This the screenshot from VID after "Adding vFW Module":



In the logs of so-openstack-adapter, it says following:


2019-12-20T13:04:26.189Z|| org.onap.so.adapters.vnf.VnfAdapterRest - Create VfModule enter inside VnfAdapterRest: {"createVfModuleRequest":{"messageId":"89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011","skipAAI":true,"notificationUrl":"http://so-bpmn-infra.onap:8081/mso/WorkflowMessage/VNFAResponse/89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011","cloudSiteId":"regionOne","cloudOwner":"CloudOwner","tenantId":"ff0e41ddc5bb43e9878dd631e6d38de0","vnfId":"07459a5b-2187-4c4c-8832-161674260b39","vnfType":"vFW_service/vFW_SINC 0","vnfVersion":"1.0","vfModuleId":"88b674f4-5cf6-4876-87b2-2f9d48bc905d","vfModuleName":"vFW_SINC_Module","vfModuleType":"VfwSinc..base_vfw..module-0","volumeGroupId":"","volumeGroupStackId":"","baseVfModuleId":"","baseVfModuleStackId":"","modelCustomizationUuid":"6c1156b9-c76c-416e-aed4-c9eae2c29a95","requestType":"","failIfExists":true,"backout":true,"enableBridge":null,"vfModuleParams":{"vf_module_id":"88b674f4-5cf6-4876-87b2-2f9d48bc905d","repo_url_blob":"https://nexus.onap.org/content/sites/raw","vnf_name":"vFW_SINC_VNF","public_net_id":"ef631032-8787-4c5a-b888-664cb059a147","unprotected_private_subnet_id":"zdfw1fwl01_unprotected_sub","vfw_private_ip_1":"192.168.20.100","onap_private_subnet_id":"fbf1bb21-6871-4819-910e-676bb4ae677d","vfw_private_ip_0":"192.168.10.100","vfw_private_ip_2":"10.10.10.11","workload_context":"","user_directives":"{}","vfw_name_0":"vFW_SINC_VNF","vf_module_name":"vFW_SINC_Module","onap_private_net_cidr":"10.10.10.0/24","image_name":"trusty","flavor_name":"m1.medium","vnf_id":"07459a5b-2187-4c4c-8832-161674260b39","dcae_collector_ip":"127.0.0.1","dcae_collector_port":"8080","protected_private_subnet_id":"zdfw1fwl01_protected_sub","oof_directives":"{}","vsn_private_ip_0":"192.168.20.250","vpg_private_ip_0":"192.168.10.200","protected_private_net_cidr":"192.168.20.0/24","vsn_private_ip_1":"10.10.10.10","unprotected_private_net_cidr":"192.168.10.0/24","vsn_name_0":"zdfw1fwl01snk01","onap_private_net_id":"96892092-2ce5-440e-b0d9-75878f9a1429","unprotected_private_net_id":"zdfw1fwl01_unprotected","demo_artifacts_version":"1.1.1","environment_context":"","sdnc_directives":"{ \"attributes\": [{\"attribute_name\":\"vf_module_id\",\"attribute_value\":\"88b674f4-5cf6-4876-87b2-2f9d48bc905d\"},{\"attribute_name\":\"onap_private_net_id\",\"attribute_value\":\"96892092-2ce5-440e-b0d9-75878f9a1429\"},{\"attribute_name\":\"vsn_name_0\",\"attribute_value\":\"zdfw1fwl01snk01\"},{\"attribute_name\":\"vnf_name\",\"attribute_value\":\"vFW_SINC_VNF\"},{\"attribute_name\":\"key_name\",\"attribute_value\":\"onap_key_k0H4\"},{\"attribute_name\":\"workload_context\",\"attribute_value\":\"\"},{\"attribute_name\":\"vf_module_name\",\"attribute_value\":\"vFW_SINC_Module\"},{\"attribute_name\":\"unprotected_private_net_id\",\"attribute_value\":\"zdfw1fwl01_unprotected\"},{\"attribute_name\":\"install_script_version\",\"attribute_value\":\"1.1.1\"},{\"attribute_name\":\"vnf_id\",\"attribute_value\":\"07459a5b-2187-4c4c-8832-161674260b39\"},{\"attribute_name\":\"cloud_env\",\"attribute_value\":\"openstack\"},{\"attribute_name\":\"repo_url_artifacts\",\"attribute_value\":\"https://nexus.onap.org/content/groups/public\"},{\"attribute_name\":\"protected_private_net_id\",\"attribute_value\":\"zdfw1fwl01_protected\"},{\"attribute_name\":\"vfw_name_0\",\"attribute_value\":\"vFW_SINC_VNF\"},{\"attribute_name\":\"dcae_collector_port\",\"attribute_value\":\"8080\"},{\"attribute_name\":\"repo_url_blob\",\"attribute_value\":\"https://nexus.onap.org/content/sites/raw\"},{\"attribute_name\":\"public_net_id\",\"attribute_value\":\"ef631032-8787-4c5a-b888-664cb059a147\"},{\"attribute_name\":\"unprotected_private_subnet_id\",\"attribute_value\":\"zdfw1fwl01_unprotected_sub\"},{\"attribute_name\":\"onap_private_net_cidr\",\"attribute_value\":\"10.10.10.0/24\"},{\"attribute_name\":\"environment_context\",\"attribute_value\":\"\"},{\"attribute_name\":\"image_name\",\"attribute_value\":\"trusty\"},{\"attribute_name\":\"onap_private_subnet_id\",\"attribute_value\":\"fbf1bb21-6871-4819-910e-676bb4ae677d\"},{\"attribute_name\":\"flavor_name\",\"attribute_value\":\"m1.medium\"},{\"attribute_name\":\"vpg_private_ip_0\",\"attribute_value\":\"192.168.10.200\"},{\"attribute_name\":\"pub_key\",\"attribute_value\":\"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnkGBPDgsHQSNHAyD1vqPQSwWo5o16eS3VUFUEjmjS4V9Bqv6Q1vxPXOGKiL8dS1YxbFJ1fgpltf+otKZ6K7pq/Yadbvkr7QCk2CIos/v0aYIRy+fXQtH98uHu9RlLLkVM5+G/HnbqRMBw20UU4ijJ9AmXyt8HEkgudiQc7HlfsukQlGPL9XZfvltbtQOQ10d+cqAhfXxHjaqDBUIa768f4MRlXJf/2HP68jm6xNPbRVY2tRrZuzI/wfigVAfSy4CKD1Aa7kVC/Qntdpule+c9zGDpCdm5dr1MHKJIQowYO/Nivqpn06jRqepJu8Bnksm/a90uonG5IjEXMkpixsLP root@onap-control\"},{\"attribute_name\":\"vfw_private_ip_0\",\"attribute_value\":\"192.168.10.100\"},{\"attribute_name\":\"demo_artifacts_version\",\"attribute_value\":\"1.1.1\"},{\"attribute_name\":\"protected_private_net_cidr\",\"attribute_value\":\"192.168.20.0/24\"},{\"attribute_name\":\"vsn_private_ip_1\",\"attribute_value\":\"10.10.10.10\"},{\"attribute_name\":\"vfw_private_ip_2\",\"attribute_value\":\"10.10.10.11\"},{\"attribute_name\":\"vfw_private_ip_1\",\"attribute_value\":\"192.168.20.100\"},{\"attribute_name\":\"vsn_private_ip_0\",\"attribute_value\":\"192.168.20.250\"},{\"attribute_name\":\"dcae_collector_ip\",\"attribute_value\":\"127.0.0.1\"},{\"attribute_name\":\"unprotected_private_net_cidr\",\"attribute_value\":\"192.168.10.0/24\"},{\"attribute_name\":\"vf_module_index\",\"attribute_value\":\"0\"},{\"attribute_name\":\"protected_private_subnet_id\",\"attribute_value\":\"zdfw1fwl01_protected_sub\"}]}","pub_key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnkGBPDgsHQSNHAyD1vqPQSwWo5o16eS3VUFUEjmjS4V9Bqv6Q1vxPXOGKiL8dS1YxbFJ1fgpltf+otKZ6K7pq/Yadbvkr7QCk2CIos/v0aYIRy+fXQtH98uHu9RlLLkVM5+G/HnbqRMBw20UU4ijJ9AmXyt8HEkgudiQc7HlfsukQlGPL9XZfvltbtQOQ10d+cqAhfXxHjaqDBUIa768f4MRlXJf/2HP68jm6xNPbRVY2tRrZuzI/wfigVAfSy4CKD1Aa7kVC/Qntdpule+c9zGDpCdm5dr1MHKJIQowYO/Nivqpn06jRqepJu8Bnksm/a90uonG5IjEXMkpixsLP root@onap-control","key_name":"onap_key_k0H4","repo_url_artifacts":"https://nexus.onap.org/content/groups/public","install_script_version":"1.1.1","protected_private_net_id":"zdfw1fwl01_protected","cloud_env":"openstack","vf_module_index":"0"},"msoRequest":{"requestId":"89b1c255-1e54-48bb-8014-b08870c5c362","serviceInstanceId":"16251552-7f13-4a3d-85b6-0fa81f7358a9"},"synchronous":false}}
2019-12-20T13:04:26.190Z|| org.onap.so.adapters.vnf.VnfAdapterRest - createVfModule exit
2019-12-20T13:04:26.190Z|| org.onap.so.adapters.vnf.VnfAdapterRest - CreateVfModuleTask start
2019-12-20T13:04:26.191Z|| org.onap.so.adapters.vnf.VnfAdapterRest - completeVnfVfModuleType=vFW_service/vFW_SINC 0::VfwSinc..base_vfw..module-0
2019-12-20T13:04:26.191Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by bus: [org.apache.cxf.ws.policy.PolicyOutInterceptor@71c8e0f7]
2019-12-20T13:04:26.192Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - Found modelCustomizationUuid! Will use that: 6c1156b9-c76c-416e-aed4-c9eae2c29a95
2019-12-20T13:04:26.192Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - requestTypeString = , nestedStackId = null, nestedBaseStackId = null
2019-12-20T13:04:26.192Z|| org.onap.so.openstack.utils.MsoHeatUtils - Query HEAT stack: vFW_SINC_Module in tenant ff0e41ddc5bb43e9878dd631e6d38de0
2019-12-20T13:04:26.192Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by service: []
2019-12-20T13:04:26.192Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Could not Find Request ID Generating New One: http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne
2019-12-20T13:04:26.192Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Could not Target Entity: http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne
2019-12-20T13:04:26.192Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by endpoint: [org.apache.cxf.interceptor.MessageSenderInterceptor@2e3a6e92, org.apache.cxf.interceptor.LoggingOutInterceptor@6552cdc4]
2019-12-20T13:04:26.193Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ===========================request begin================================================
2019-12-20T13:04:26.193Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - URI         : http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne
2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Method      : GET
2019-12-20T13:04:26.193Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by binding: [org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor@16f90189]
2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Headers     : {Accept=[application/hal+json], Content-Length=[0], Content-Type=[application/hal+json], X-ONAP-RequestID=[977597eb-f877-4471-8fb7-21a99db14869], X-ONAP-InvocationID=[808ca11b-e4c1-46bd-9cc3-92dce7b001ae], X-ONAP-PartnerName=[SO]}
2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Request body:
2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ==========================request end================================================
2019-12-20T13:04:26.194Z|| org.apache.cxf.interceptor.LoggingOutInterceptor - Outbound Message
---------------------------
ID: 10
Response-Code: 202
Content-Type: application/json
Headers: {Date=[Fri, 20 Dec 2019 13:04:26 GMT], Content-Length=[0]}
--------------------------------------
2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ============================response begin==========================================
2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Status code  : 200
2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Status text  :
2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Headers      : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/hal+json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Fri, 20 Dec 2019 13:04:26 GMT]}
2019-12-20T13:04:26.210Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Response body: {
  "id" : "regionOne",
  "identityService" : {
    "id" : "DEFAULT_KEYSTONE",
    "handler" : { },
    "identityServerTypeAsString" : "KEYSTONE",
    "hibernateLazyInitializer" : { },
    "identity_url" : "https://hvlcloud.5ghvl.local:13000//v3",
    "mso_id" : "admin",
    "mso_pass" : "5BD5DA5FCC5CBAAE679B705D720D5BE0AAFE1334CBF63A1B0509E15623B793AE89B4",
    "project_domain_name" : null,
    "user_domain_name" : null,
    "admin_tenant" : "service",
    "member_role" : "admin",
    "tenant_metadata" : true,
    "identity_server_type" : "KEYSTONE",
    "identity_authentication_type" : "USERNAME_PASSWORD",
    "last_updated_by" : "FLYWAY",
    "creation_timestamp" : "2019-12-16T08:25:31.000+0000",
    "update_timestamp" : "2019-12-16T08:25:31.000+0000"
  },
  "uri" : null,
  "region_id" : "RegionOne",
  "aic_version" : "2.5",
  "clli" : "RegionOne",
  "platform" : null,
  "orchestrator" : null,
  "cloudify_id" : null,
  "identity_service_id" : "DEFAULT_KEYSTONE",
  "last_updated_by" : "FLYWAY",
  "creation_timestamp" : "2019-12-16T08:25:31.000+0000",
  "update_timestamp" : "2019-12-16T08:25:31.000+0000",
  "_links" : {
    "self" : {
      "href" : "http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne"
    },
    "cloudSite" : {
      "href" : "http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne"
    }
  }
}
2019-12-20T13:04:26.210Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - =======================response end=================================================
2019-12-20T13:04:26.212Z|| org.onap.so.openstack.utils.MsoHeatUtils - Found: CloudSite_.._jvsta0b_3c[regionId=RegionOne,identityServiceId=DEFAULT_KEYSTONE,cloudVersion=2.5,clli=RegionOne,cloudifyId=<null>,platform=<null>,orchestrator=<null>]
2019-12-20T13:04:26.212Z|| org.onap.so.openstack.utils.MsoHeatUtils - Found: CloudIdentity[id=DEFAULT_KEYSTONE,identityUrl=https://hvlcloud.5ghvl.local:13000//v3,msoId=admin,projectDomain=<null>,userDomain=<null>,adminTenant=service,memberRole=admin,tenantMetadata=true,identityServerType=KEYSTONE,identityAuthenticationType=USERNAME_PASSWORD]
2019-12-20T13:04:26.213Z|| org.onap.so.openstack.utils.MsoHeatUtils - keystoneUrl=https://hvlcloud.5ghvl.local:13000//v3
2019-12-20T13:04:26.221Z|| org.onap.so.openstack.utils.MsoCommonUtils -  request: TokensResource.Authenticate Retry indicated. Attempts remaining:2
2019-12-20T13:04:31.228Z|| org.onap.so.openstack.utils.MsoCommonUtils -  request: TokensResource.Authenticate Retry indicated. Attempts remaining:1
2019-12-20T13:04:36.236Z|| org.onap.so.openstack.utils.MsoCommonUtils -  request: TokensResource.Authenticate Retry indicated. Attempts remaining:0
2019-12-20T13:04:41.243Z|| org.onap.so.openstack.utils.MsoHeatUtils - RA_CONNECTION_EXCEPTION 200 Openstack Exception on Token request:
org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:877)
        at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:653)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$FastClassBySpringCGLIB$$8b1f101c.invoke(<generated>)
        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:746)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
        at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:294)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)
        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$EnhancerBySpringCGLIB$$85250c5a.createVfModule(<generated>)
        at org.onap.so.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:362)
        at java.lang.Thread.run(Thread.java:748)
Caused by: com.woorea.openstack.base.client.OpenStackConnectException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at com.woorea.openstack.connector.HttpClientConnector.request(HttpClientConnector.java:178)
        at com.woorea.openstack.base.client.OpenStackClient.request(OpenStackClient.java:71)
        at com.woorea.openstack.base.client.OpenStackClient.execute(OpenStackClient.java:88)
        at com.woorea.openstack.base.client.OpenStackRequest.execute(OpenStackRequest.java:115)
        at org.onap.so.openstack.utils.MsoCommonUtils.executeAndRecordOpenstackRequest(MsoCommonUtils.java:88)
        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:826)
        ... 13 common frames omitted
2019-12-20T13:04:41.243Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - RA_QUERY_VNF_ERR vFW_SINC_Module CloudOwner regionOne ff0e41ddc5bb43e9878dd631e6d38de0 OpenStack queryStack 300 Exception - queryStack
org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:877)
        at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:653)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$FastClassBySpringCGLIB$$8b1f101c.invoke(<generated>)
        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:746)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
        at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:294)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)
        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$EnhancerBySpringCGLIB$$85250c5a.createVfModule(<generated>)
        at org.onap.so.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:362)
        at java.lang.Thread.run(Thread.java:748)
Caused by: com.woorea.openstack.base.client.OpenStackConnectException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at com.woorea.openstack.connector.HttpClientConnector.request(HttpClientConnector.java:178)
        at com.woorea.openstack.base.client.OpenStackClient.request(OpenStackClient.java:71)
        at com.woorea.openstack.base.client.OpenStackClient.execute(OpenStackClient.java:88)
        at com.woorea.openstack.base.client.OpenStackRequest.execute(OpenStackRequest.java:115)
        at org.onap.so.openstack.utils.MsoCommonUtils.executeAndRecordOpenstackRequest(MsoCommonUtils.java:88)
        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:826)
        ... 13 common frames omitted
2019-12-20T13:04:41.243Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - Create VF Module: Query vFW_SINC_Module in CloudOwner/regionOne/ff0e41ddc5bb43e9878dd631e6d38de0: org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2019-12-20T13:04:41.244Z|| org.onap.so.adapters.vnf.VnfAdapterRest - Exception :
org.onap.so.adapters.vnf.exceptions.VnfException: org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:664)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$FastClassBySpringCGLIB$$8b1f101c.invoke(<generated>)
        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:746)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)
        at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:294)
        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98)
        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)
        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$EnhancerBySpringCGLIB$$85250c5a.createVfModule(<generated>)
        at org.onap.so.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:362)
        at java.lang.Thread.run(Thread.java:748)
Caused by: org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:877)
        at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502)
        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:653)
        ... 11 common frames omitted
Caused by: com.woorea.openstack.base.client.OpenStackConnectException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
        at com.woorea.openstack.connector.HttpClientConnector.request(HttpClientConnector.java:178)
        at com.woorea.openstack.base.client.OpenStackClient.request(OpenStackClient.java:71)
        at com.woorea.openstack.base.client.OpenStackClient.execute(OpenStackClient.java:88)
        at com.woorea.openstack.base.client.OpenStackRequest.execute(OpenStackRequest.java:115)
        at org.onap.so.openstack.utils.MsoCommonUtils.executeAndRecordOpenstackRequest(MsoCommonUtils.java:88)
        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:826)
        ... 13 common frames omitted
2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - Sending response to BPEL: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<vfModuleException>
    <messageId>89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011</messageId>
    <category>INTERNAL</category>
    <message>org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</message>
    <rolledBack>true</rolledBack>
</vfModuleException>
 
2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - Sending to BPEL server: http://so-bpmn-infra.onap:8081/mso/WorkflowMessage/VNFAResponse/89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011
2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - Content is: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<vfModuleException>
    <messageId>89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011</messageId>
    <category>INTERNAL</category>
    <message>org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</message>
    <rolledBack>true</rolledBack>
</vfModuleException>
 
2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - HTTPPost Headers: Authorization: Basic cG9CcG1uOnBhc3N3b3JkMSQ=
2019-12-20T13:04:47.033Z|| org.onap.so.adapters.vnf.BpelRestClient - Response code from BPEL server: 204
2019-12-20T13:04:47.033Z|| org.onap.so.adapters.vnf.BpelRestClient - Response body is:
2019-12-20T13:04:47.033Z|| org.onap.so.adapters.vnf.BpelRestClient - Got response code: 204: returning.
2019-12-20T13:04:47.037Z|| org.onap.so.adapters.vnf.VnfAdapterRest - CreateVfModuleTask exit: code=400, resp=<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<vfModuleException>
    <messageId>89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011</messageId>
    <category>INTERNAL</category>
    <message>org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</message>
    <rolledBack>true</rolledBack>
</vfModuleException>



As far as I understand from logs, it cannot find the certificate in the requested path. Where should I put our certificate or is this error is different? I would be happy if someone can help me.

Thanks,

Sarp 

Brian Freeman
 

Looks like you setup your keystone as V3 in the url but didnt configure SO for v3 credentials

 

https://hvlcloud.5ghvl.local:13000//v3,msoId=admin,projectDomain=<null>,userDomain=<null>,adminTenant=service,memberRole=admin,tenantMetadata=true,identityServerType=KEYSTONE,identityAuthenticationType=USERNAME_PASSWORD]

 

for v3 projectDomain and userDomain must be set to the values in your openstack.rc file from horizon.

 

Check onap.readthedocs.io for how to setup the override file and search jira for the mechansim to use either the REST API into SO for setting cloud identities or sql for the maridb table that you can update for the correct credentials.

 

brian

 

From: onap-discuss@... <onap-discuss@...> On Behalf Of skoksal@...
Sent: Monday, December 23, 2019 1:27 AM
To: onap-discuss@...
Subject: [onap-discuss] VID SO "Add VF_Module+" MSO failure #vid #so

 

Hi,

I am trying to make vFW demo. I preloaded vFW and in the last step, I was trying to “Add VF_Module+” for vFW_SINC_Module. However, it gave "MSO failure-- see log for details". In the logs of so-openstack-adapter, I saw a error related with Openstack certificate. We have Redhat Openstack and we have a certificate for Openstack. I added our Openstack's "ca.cert" file to end of so-openstack-adapter's "/etc/ssl/cert.pem" file. This the screenshot from VID after "Adding vFW Module":



In the logs of so-openstack-adapter, it says following:

2019-12-20T13:04:26.189Z|| org.onap.so.adapters.vnf.VnfAdapterRest - Create VfModule enter inside VnfAdapterRest: {"createVfModuleRequest":{"messageId":"89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011","skipAAI":true,"notificationUrl":"http://so-bpmn-infra.onap:8081/mso/WorkflowMessage/VNFAResponse/89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011","cloudSiteId":"regionOne","cloudOwner":"CloudOwner","tenantId":"ff0e41ddc5bb43e9878dd631e6d38de0","vnfId":"07459a5b-2187-4c4c-8832-161674260b39","vnfType":"vFW_service/vFW_SINC 0","vnfVersion":"1.0","vfModuleId":"88b674f4-5cf6-4876-87b2-2f9d48bc905d","vfModuleName":"vFW_SINC_Module","vfModuleType":"VfwSinc..base_vfw..module-0","volumeGroupId":"","volumeGroupStackId":"","baseVfModuleId":"","baseVfModuleStackId":"","modelCustomizationUuid":"6c1156b9-c76c-416e-aed4-c9eae2c29a95","requestType":"","failIfExists":true,"backout":true,"enableBridge":null,"vfModuleParams":{"vf_module_id":"88b674f4-5cf6-4876-87b2-2f9d48bc905d","repo_url_blob":"https://nexus.onap.org/content/sites/raw%22,%22vnf_name%22:%22vFW_SINC_VNF%22,%22public_net_id%22:%22ef631032-8787-4c5a-b888-664cb059a147%22,%22unprotected_private_subnet_id%22:%22zdfw1fwl01_unprotected_sub%22,%22vfw_private_ip_1%22:%22192.168.20.100%22,%22onap_private_subnet_id%22:%22fbf1bb21-6871-4819-910e-676bb4ae677d%22,%22vfw_private_ip_0%22:%22192.168.10.100%22,%22vfw_private_ip_2%22:%2210.10.10.11%22,%22workload_context%22:%22%22,%22user_directives%22:%22%7B%7D%22,%22vfw_name_0%22:%22vFW_SINC_VNF%22,%22vf_module_name%22:%22vFW_SINC_Module%22,%22onap_private_net_cidr%22:%2210.10.10.0/24%22,%22image_name%22:%22trusty%22,%22flavor_name%22:%22m1.medium%22,%22vnf_id%22:%2207459a5b-2187-4c4c-8832-161674260b39%22,%22dcae_collector_ip%22:%22127.0.0.1%22,%22dcae_collector_port%22:%228080%22,%22protected_private_subnet_id%22:%22zdfw1fwl01_protected_sub%22,%22oof_directives%22:%22%7B%7D%22,%22vsn_private_ip_0%22:%22192.168.20.250%22,%22vpg_private_ip_0%22:%22192.168.10.200%22,%22protected_private_net_cidr%22:%22192.168.20.0/24%22,%22vsn_private_ip_1%22:%2210.10.10.10%22,%22unprotected_private_net_cidr%22:%22192.168.10.0/24%22,%22vsn_name_0%22:%22zdfw1fwl01snk01%22,%22onap_private_net_id%22:%2296892092-2ce5-440e-b0d9-75878f9a1429%22,%22unprotected_private_net_id%22:%22zdfw1fwl01_unprotected%22,%22demo_artifacts_version%22:%221.1.1%22,%22environment_context%22:%22%22,%22sdnc_directives%22:%22%7B \"attributes\": [{\"attribute_name\":\"vf_module_id\",\"attribute_value\":\"88b674f4-5cf6-4876-87b2-2f9d48bc905d\"},{\"attribute_name\":\"onap_private_net_id\",\"attribute_value\":\"96892092-2ce5-440e-b0d9-75878f9a1429\"},{\"attribute_name\":\"vsn_name_0\",\"attribute_value\":\"zdfw1fwl01snk01\"},{\"attribute_name\":\"vnf_name\",\"attribute_value\":\"vFW_SINC_VNF\"},{\"attribute_name\":\"key_name\",\"attribute_value\":\"onap_key_k0H4\"},{\"attribute_name\":\"workload_context\",\"attribute_value\":\"\"},{\"attribute_name\":\"vf_module_name\",\"attribute_value\":\"vFW_SINC_Module\"},{\"attribute_name\":\"unprotected_private_net_id\",\"attribute_value\":\"zdfw1fwl01_unprotected\"},{\"attribute_name\":\"install_script_version\",\"attribute_value\":\"1.1.1\"},{\"attribute_name\":\"vnf_id\",\"attribute_value\":\"07459a5b-2187-4c4c-8832-161674260b39\"},{\"attribute_name\":\"cloud_env\",\"attribute_value\":\"openstack\"},{\"attribute_name\":\"repo_url_artifacts\",\"attribute_value\":\"https://nexus.onap.org/content/groups/public%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22protected_private_net_id%5C%22,%5C%22attribute_value%5C%22:%5C%22zdfw1fwl01_protected%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22vfw_name_0%5C%22,%5C%22attribute_value%5C%22:%5C%22vFW_SINC_VNF%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22dcae_collector_port%5C%22,%5C%22attribute_value%5C%22:%5C%228080%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22repo_url_blob%5C%22,%5C%22attribute_value%5C%22:%5C%22https://nexus.onap.org/content/sites/raw%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22public_net_id%5C%22,%5C%22attribute_value%5C%22:%5C%22ef631032-8787-4c5a-b888-664cb059a147%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22unprotected_private_subnet_id%5C%22,%5C%22attribute_value%5C%22:%5C%22zdfw1fwl01_unprotected_sub%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22onap_private_net_cidr%5C%22,%5C%22attribute_value%5C%22:%5C%2210.10.10.0/24%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22environment_context%5C%22,%5C%22attribute_value%5C%22:%5C%22%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22image_name%5C%22,%5C%22attribute_value%5C%22:%5C%22trusty%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22onap_private_subnet_id%5C%22,%5C%22attribute_value%5C%22:%5C%22fbf1bb21-6871-4819-910e-676bb4ae677d%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22flavor_name%5C%22,%5C%22attribute_value%5C%22:%5C%22m1.medium%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22vpg_private_ip_0%5C%22,%5C%22attribute_value%5C%22:%5C%22192.168.10.200%5C%22%7D,%7B%5C%22attribute_name%5C%22:%5C%22pub_key%5C%22,%5C%22attribute_value%5C%22:%5C%22ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnkGBPDgsHQSNHAyD1vqPQSwWo5o16eS3VUFUEjmjS4V9Bqv6Q1vxPXOGKiL8dS1YxbFJ1fgpltf+otKZ6K7pq/Yadbvkr7QCk2CIos/v0aYIRy+fXQtH98uHu9RlLLkVM5+G/HnbqRMBw20UU4ijJ9AmXyt8HEkgudiQc7HlfsukQlGPL9XZfvltbtQOQ10d+cqAhfXxHjaqDBUIa768f4MRlXJf/2HP68jm6xNPbRVY2tRrZuzI/wfigVAfSy4CKD1Aa7kVC/Qntdpule+c9zGDpCdm5dr1MHKJIQowYO/Nivqpn06jRqepJu8Bnksm/a90uonG5IjEXMkpixsLP root@onap-control\"},{\"attribute_name\":\"vfw_private_ip_0\",\"attribute_value\":\"192.168.10.100\"},{\"attribute_name\":\"demo_artifacts_version\",\"attribute_value\":\"1.1.1\"},{\"attribute_name\":\"protected_private_net_cidr\",\"attribute_value\":\"192.168.20.0/24\"},{\"attribute_name\":\"vsn_private_ip_1\",\"attribute_value\":\"10.10.10.10\"},{\"attribute_name\":\"vfw_private_ip_2\",\"attribute_value\":\"10.10.10.11\"},{\"attribute_name\":\"vfw_private_ip_1\",\"attribute_value\":\"192.168.20.100\"},{\"attribute_name\":\"vsn_private_ip_0\",\"attribute_value\":\"192.168.20.250\"},{\"attribute_name\":\"dcae_collector_ip\",\"attribute_value\":\"127.0.0.1\"},{\"attribute_name\":\"unprotected_private_net_cidr\",\"attribute_value\":\"192.168.10.0/24\"},{\"attribute_name\":\"vf_module_index\",\"attribute_value\":\"0\"},{\"attribute_name\":\"protected_private_subnet_id\",\"attribute_value\":\"zdfw1fwl01_protected_sub\"}]}","pub_key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnkGBPDgsHQSNHAyD1vqPQSwWo5o16eS3VUFUEjmjS4V9Bqv6Q1vxPXOGKiL8dS1YxbFJ1fgpltf+otKZ6K7pq/Yadbvkr7QCk2CIos/v0aYIRy+fXQtH98uHu9RlLLkVM5+G/HnbqRMBw20UU4ijJ9AmXyt8HEkgudiQc7HlfsukQlGPL9XZfvltbtQOQ10d+cqAhfXxHjaqDBUIa768f4MRlXJf/2HP68jm6xNPbRVY2tRrZuzI/wfigVAfSy4CKD1Aa7kVC/Qntdpule+c9zGDpCdm5dr1MHKJIQowYO/Nivqpn06jRqepJu8Bnksm/a90uonG5IjEXMkpixsLP root@onap-control","key_name":"onap_key_k0H4","repo_url_artifacts":"https://nexus.onap.org/content/groups/public","install_script_version":"1.1.1","protected_private_net_id":"zdfw1fwl01_protected","cloud_env":"openstack","vf_module_index":"0"},"msoRequest":{"requestId":"89b1c255-1e54-48bb-8014-b08870c5c362","serviceInstanceId":"16251552-7f13-4a3d-85b6-0fa81f7358a9"},"synchronous":false}}

2019-12-20T13:04:26.190Z|| org.onap.so.adapters.vnf.VnfAdapterRest - createVfModule exit

2019-12-20T13:04:26.190Z|| org.onap.so.adapters.vnf.VnfAdapterRest - CreateVfModuleTask start

2019-12-20T13:04:26.191Z|| org.onap.so.adapters.vnf.VnfAdapterRest - completeVnfVfModuleType=vFW_service/vFW_SINC 0::VfwSinc..base_vfw..module-0

2019-12-20T13:04:26.191Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by bus: [org.apache.cxf.ws.policy.PolicyOutInterceptor@71c8e0f7]

2019-12-20T13:04:26.192Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - Found modelCustomizationUuid! Will use that: 6c1156b9-c76c-416e-aed4-c9eae2c29a95

2019-12-20T13:04:26.192Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - requestTypeString = , nestedStackId = null, nestedBaseStackId = null

2019-12-20T13:04:26.192Z|| org.onap.so.openstack.utils.MsoHeatUtils - Query HEAT stack: vFW_SINC_Module in tenant ff0e41ddc5bb43e9878dd631e6d38de0

2019-12-20T13:04:26.192Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by service: []

2019-12-20T13:04:26.192Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Could not Find Request ID Generating New One: http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne

2019-12-20T13:04:26.192Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Could not Target Entity: http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne

2019-12-20T13:04:26.192Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by endpoint: [org.apache.cxf.interceptor.MessageSenderInterceptor@2e3a6e92, org.apache.cxf.interceptor.LoggingOutInterceptor@6552cdc4]

2019-12-20T13:04:26.193Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ===========================request begin================================================

2019-12-20T13:04:26.193Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - URI         : http://so-catalog-db-adapter.onap:8082/cloudSite/regionOne

2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Method      : GET

2019-12-20T13:04:26.193Z|| o.apache.cxf.interceptor.OutgoingChainInterceptor - Interceptors contributed by binding: [org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor@16f90189]

2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Headers     : {Accept=[application/hal+json], Content-Length=[0], Content-Type=[application/hal+json], X-ONAP-RequestID=[977597eb-f877-4471-8fb7-21a99db14869], X-ONAP-InvocationID=[808ca11b-e4c1-46bd-9cc3-92dce7b001ae], X-ONAP-PartnerName=[SO]}

2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Request body:

2019-12-20T13:04:26.194Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ==========================request end================================================

2019-12-20T13:04:26.194Z|| org.apache.cxf.interceptor.LoggingOutInterceptor - Outbound Message

---------------------------

ID: 10

Response-Code: 202

Content-Type: application/json

Headers: {Date=[Fri, 20 Dec 2019 13:04:26 GMT], Content-Length=[0]}

--------------------------------------

2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - ============================response begin==========================================

2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Status code  : 200

2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Status text  :

2019-12-20T13:04:26.209Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Headers      : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/hal+json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Fri, 20 Dec 2019 13:04:26 GMT]}

2019-12-20T13:04:26.210Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - Response body: {

  "id" : "regionOne",

  "identityService" : {

    "id" : "DEFAULT_KEYSTONE",

    "handler" : { },

    "identityServerTypeAsString" : "KEYSTONE",

    "hibernateLazyInitializer" : { },

    "identity_url" : "https://hvlcloud.5ghvl.local:13000//v3",

    "mso_id" : "admin",

    "mso_pass" : "5BD5DA5FCC5CBAAE679B705D720D5BE0AAFE1334CBF63A1B0509E15623B793AE89B4",

    "project_domain_name" : null,

    "user_domain_name" : null,

    "admin_tenant" : "service",

    "member_role" : "admin",

    "tenant_metadata" : true,

    "identity_server_type" : "KEYSTONE",

    "identity_authentication_type" : "USERNAME_PASSWORD",

    "last_updated_by" : "FLYWAY",

    "creation_timestamp" : "2019-12-16T08:25:31.000+0000",

    "update_timestamp" : "2019-12-16T08:25:31.000+0000"

  },

  "uri" : null,

  "region_id" : "RegionOne",

  "aic_version" : "2.5",

  "clli" : "RegionOne",

  "platform" : null,

  "orchestrator" : null,

  "cloudify_id" : null,

  "identity_service_id" : "DEFAULT_KEYSTONE",

  "last_updated_by" : "FLYWAY",

  "creation_timestamp" : "2019-12-16T08:25:31.000+0000",

  "update_timestamp" : "2019-12-16T08:25:31.000+0000",

  "_links" : {

    "self" : {

    },

    "cloudSite" : {

    }

  }

}

2019-12-20T13:04:26.210Z|| o.onap.so.logging.jaxrs.filter.SpringClientFilter - =======================response end=================================================

2019-12-20T13:04:26.212Z|| org.onap.so.openstack.utils.MsoHeatUtils - Found: CloudSite_.._jvsta0b_3c[regionId=RegionOne,identityServiceId=DEFAULT_KEYSTONE,cloudVersion=2.5,clli=RegionOne,cloudifyId=<null>,platform=<null>,orchestrator=<null>]

2019-12-20T13:04:26.213Z|| org.onap.so.openstack.utils.MsoHeatUtils - keystoneUrl=https://hvlcloud.5ghvl.local:13000//v3

2019-12-20T13:04:26.221Z|| org.onap.so.openstack.utils.MsoCommonUtils -  request: TokensResource.Authenticate Retry indicated. Attempts remaining:2

2019-12-20T13:04:31.228Z|| org.onap.so.openstack.utils.MsoCommonUtils -  request: TokensResource.Authenticate Retry indicated. Attempts remaining:1

2019-12-20T13:04:36.236Z|| org.onap.so.openstack.utils.MsoCommonUtils -  request: TokensResource.Authenticate Retry indicated. Attempts remaining:0

2019-12-20T13:04:41.243Z|| org.onap.so.openstack.utils.MsoHeatUtils - RA_CONNECTION_EXCEPTION 200 Openstack Exception on Token request:

org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:877)

        at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:653)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$FastClassBySpringCGLIB$$8b1f101c.invoke(<generated>)

        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)

        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:746)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

        at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:294)

        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)

        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$EnhancerBySpringCGLIB$$85250c5a.createVfModule(<generated>)

        at org.onap.so.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:362)

        at java.lang.Thread.run(Thread.java:748)

Caused by: com.woorea.openstack.base.client.OpenStackConnectException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at com.woorea.openstack.connector.HttpClientConnector.request(HttpClientConnector.java:178)

        at com.woorea.openstack.base.client.OpenStackClient.request(OpenStackClient.java:71)

        at com.woorea.openstack.base.client.OpenStackClient.execute(OpenStackClient.java:88)

        at com.woorea.openstack.base.client.OpenStackRequest.execute(OpenStackRequest.java:115)

        at org.onap.so.openstack.utils.MsoCommonUtils.executeAndRecordOpenstackRequest(MsoCommonUtils.java:88)

        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:826)

        ... 13 common frames omitted

2019-12-20T13:04:41.243Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - RA_QUERY_VNF_ERR vFW_SINC_Module CloudOwner regionOne ff0e41ddc5bb43e9878dd631e6d38de0 OpenStack queryStack 300 Exception - queryStack

org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:877)

        at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:653)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$FastClassBySpringCGLIB$$8b1f101c.invoke(<generated>)

        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)

        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:746)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

        at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:294)

        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)

        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$EnhancerBySpringCGLIB$$85250c5a.createVfModule(<generated>)

        at org.onap.so.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:362)

        at java.lang.Thread.run(Thread.java:748)

Caused by: com.woorea.openstack.base.client.OpenStackConnectException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at com.woorea.openstack.connector.HttpClientConnector.request(HttpClientConnector.java:178)

        at com.woorea.openstack.base.client.OpenStackClient.request(OpenStackClient.java:71)

        at com.woorea.openstack.base.client.OpenStackClient.execute(OpenStackClient.java:88)

        at com.woorea.openstack.base.client.OpenStackRequest.execute(OpenStackRequest.java:115)

        at org.onap.so.openstack.utils.MsoCommonUtils.executeAndRecordOpenstackRequest(MsoCommonUtils.java:88)

        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:826)

        ... 13 common frames omitted

2019-12-20T13:04:41.243Z|| org.onap.so.adapters.vnf.MsoVnfAdapterImpl - Create VF Module: Query vFW_SINC_Module in CloudOwner/regionOne/ff0e41ddc5bb43e9878dd631e6d38de0: org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

2019-12-20T13:04:41.244Z|| org.onap.so.adapters.vnf.VnfAdapterRest - Exception :

org.onap.so.adapters.vnf.exceptions.VnfException: org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:664)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$FastClassBySpringCGLIB$$8b1f101c.invoke(<generated>)

        at org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)

        at org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:746)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:163)

        at org.springframework.transaction.interceptor.TransactionAspectSupport.invokeWithinTransaction(TransactionAspectSupport.java:294)

        at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:98)

        at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:185)

        at org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:688)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl$$EnhancerBySpringCGLIB$$85250c5a.createVfModule(<generated>)

        at org.onap.so.adapters.vnf.VnfAdapterRest$CreateVfModuleTask.run(VnfAdapterRest.java:362)

        at java.lang.Thread.run(Thread.java:748)

Caused by: org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:877)

        at org.onap.so.openstack.utils.MsoHeatUtils.queryStack(MsoHeatUtils.java:502)

        at org.onap.so.adapters.vnf.MsoVnfAdapterImpl.createVfModule(MsoVnfAdapterImpl.java:653)

        ... 11 common frames omitted

Caused by: com.woorea.openstack.base.client.OpenStackConnectException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

        at com.woorea.openstack.connector.HttpClientConnector.request(HttpClientConnector.java:178)

        at com.woorea.openstack.base.client.OpenStackClient.request(OpenStackClient.java:71)

        at com.woorea.openstack.base.client.OpenStackClient.execute(OpenStackClient.java:88)

        at com.woorea.openstack.base.client.OpenStackRequest.execute(OpenStackRequest.java:115)

        at org.onap.so.openstack.utils.MsoCommonUtils.executeAndRecordOpenstackRequest(MsoCommonUtils.java:88)

        at org.onap.so.openstack.utils.MsoHeatUtils.getHeatClient(MsoHeatUtils.java:826)

        ... 13 common frames omitted

2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - Sending response to BPEL: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<vfModuleException>

    <messageId>89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011</messageId>

    <category>INTERNAL</category>

    <message>org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</message>

    <rolledBack>true</rolledBack>

</vfModuleException>

 

2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - Sending to BPEL server: http://so-bpmn-infra.onap:8081/mso/WorkflowMessage/VNFAResponse/89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011

2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - Content is: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<vfModuleException>

    <messageId>89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011</messageId>

    <category>INTERNAL</category>

    <message>org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</message>

    <rolledBack>true</rolledBack>

</vfModuleException>

 

2019-12-20T13:04:41.251Z|| org.onap.so.adapters.vnf.BpelRestClient - HTTPPost Headers: Authorization: Basic cG9CcG1uOnBhc3N3b3JkMSQ=

2019-12-20T13:04:47.033Z|| org.onap.so.adapters.vnf.BpelRestClient - Response code from BPEL server: 204

2019-12-20T13:04:47.033Z|| org.onap.so.adapters.vnf.BpelRestClient - Response body is:

2019-12-20T13:04:47.033Z|| org.onap.so.adapters.vnf.BpelRestClient - Got response code: 204: returning.

2019-12-20T13:04:47.037Z|| org.onap.so.adapters.vnf.VnfAdapterRest - CreateVfModuleTask exit: code=400, resp=<?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<vfModuleException>

    <messageId>89b1c255-1e54-48bb-8014-b08870c5c362-1576847066011</messageId>

    <category>INTERNAL</category>

    <message>org.onap.so.openstack.exceptions.MsoIOException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target</message>

    <rolledBack>true</rolledBack>

</vfModuleException>




As far as I understand from logs, it cannot find the certificate in the requested path. Where should I put our certificate or is this error is different? I would be happy if someone can help me.

Thanks,

Sarp 

Sarp KÖKSAL
 

Hi Brian,

 

This is the table for identity_services in the mariadb pod. Are my configurations correct? Do I have to change or add something?

 

MariaDB [catalogdb]> select * from identity_services;

+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+

| ID               | IDENTITY_URL                                 | MSO_ID               | MSO_PASS                                                             | ADMIN_TENANT | MEMBER_ROLE | TENANT_METADATA | IDENTITY_SERVER_TYPE | IDENTITY_AUTHENTICATION_TYPE | LAST_UPDATED_BY | CREATION_TIMESTAMP  | UPDATE_TIMESTAMP    | PROJECT_DOMAIN_NAME | USER_DOMAIN_NAME |

+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+

| DEFAULT_KEYSTONE | https://hvlcloud.5ghvl.local:13000//v3       | admin                | 5BD5DA5FCC5CBAAE679B705D720D5BE0AAFE1334CBF63A1B0509E15623B793AE89B4 | service      | admin       |               1 | KEYSTONE_V3          | USERNAME_PASSWORD            | FLYWAY          | 2019-12-16 08:25:31 | 2019-12-16 08:25:31 | NULL                | NULL             |

| RAX_KEYSTONE     | https://identity.api.rackspacecloud.com/v2.0 | RACKSPACE_ACCOUNT_ID | RACKSPACE_ACCOUNT_APIKEY                                             | service      | admin       |               1 | KEYSTONE             | RACKSPACE_APIKEY             | FLYWAY          | 2019-12-16 08:25:31 | 2019-12-16 08:25:31 | NULL                | NULL             |

+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+

 

Brian Freeman
 

PROJECT_DOMAIN_NAME and USER_DOMAIN_NAME should not be null for keystone_v3.

 

OOM-1982 has details on the mapping from your openstack.rc  and methods to update the table either via sql or REST.

 

Brian

 

 

From: skoksal@... <skoksal@...>
Sent: Monday, December 23, 2019 7:58 AM
To: FREEMAN, BRIAN D <bf1936@...>; onap-discuss@...
Subject: Re: [onap-discuss] VID SO "Add VF_Module+" MSO failure #vid #so

 

Hi Brian,

 

This is the table for identity_services in the mariadb pod. Are my configurations correct? Do I have to change or add something?

 

MariaDB [catalogdb]> select * from identity_services;

+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+

| ID               | IDENTITY_URL                                 | MSO_ID               | MSO_PASS                                                             | ADMIN_TENANT | MEMBER_ROLE | TENANT_METADATA | IDENTITY_SERVER_TYPE | IDENTITY_AUTHENTICATION_TYPE | LAST_UPDATED_BY | CREATION_TIMESTAMP  | UPDATE_TIMESTAMP    | PROJECT_DOMAIN_NAME | USER_DOMAIN_NAME |

+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+

| DEFAULT_KEYSTONE | https://hvlcloud.5ghvl.local:13000//v3       | admin                | 5BD5DA5FCC5CBAAE679B705D720D5BE0AAFE1334CBF63A1B0509E15623B793AE89B4 | service      | admin       |               1 | KEYSTONE_V3          | USERNAME_PASSWORD            | FLYWAY          | 2019-12-16 08:25:31 | 2019-12-16 08:25:31 | NULL                | NULL             |

| RAX_KEYSTONE     | https://identity.api.rackspacecloud.com/v2.0 | RACKSPACE_ACCOUNT_ID | RACKSPACE_ACCOUNT_APIKEY                                             | service      | admin       |               1 | KEYSTONE             | RACKSPACE_APIKEY             | FLYWAY          | 2019-12-16 08:25:31 | 2019-12-16 08:25:31 | NULL                | NULL             |

+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+

 

Sarp KÖKSAL
 

I corrected project_domain_nane and user_domain_name but it still gives the same error. Do you have any other suggestion?

On 23 Dec 2019, at 17:19, FREEMAN, BRIAN D <bf1936@...> wrote:

PROJECT_DOMAIN_NAME and USER_DOMAIN_NAME should not be null for keystone_v3.
 
OOM-1982 has details on the mapping from your openstack.rc  and methods to update the table either via sql or REST.
 
Brian
 
 
From: skoksal@... <skoksal@...> 
Sent: Monday, December 23, 2019 7:58 AM
To: FREEMAN, BRIAN D <bf1936@...>; onap-discuss@...
Subject: Re: [onap-discuss] VID SO "Add VF_Module+" MSO failure #vid #so
 
Hi Brian,
 
This is the table for identity_services in the mariadb pod. Are my configurations correct? Do I have to change or add something?
 
MariaDB [catalogdb]> select * from identity_services;
+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+
| ID               | IDENTITY_URL                                 | MSO_ID               | MSO_PASS                                                             | ADMIN_TENANT | MEMBER_ROLE | TENANT_METADATA | IDENTITY_SERVER_TYPE | IDENTITY_AUTHENTICATION_TYPE | LAST_UPDATED_BY | CREATION_TIMESTAMP  | UPDATE_TIMESTAMP    | PROJECT_DOMAIN_NAME | USER_DOMAIN_NAME |
+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+
| DEFAULT_KEYSTONE | https://hvlcloud.5ghvl.local:13000//v3       | admin                | 5BD5DA5FCC5CBAAE679B705D720D5BE0AAFE1334CBF63A1B0509E15623B793AE89B4 | service      | admin       |               1 | KEYSTONE_V3          | USERNAME_PASSWORD            | FLYWAY          | 2019-12-16 08:25:31 | 2019-12-16 08:25:31 | NULL                | NULL             |
| RAX_KEYSTONE     | https://identity.api.rackspacecloud.com/v2.0 | RACKSPACE_ACCOUNT_ID | RACKSPACE_ACCOUNT_APIKEY                                             | service      | admin       |               1 | KEYSTONE             | RACKSPACE_APIKEY             | FLYWAY          | 2019-12-16 08:25:31 | 2019-12-16 08:25:31 | NULL                | NULL             |
+------------------+----------------------------------------------+----------------------+----------------------------------------------------------------------+--------------+-------------+-----------------+----------------------+------------------------------+-----------------+---------------------+---------------------+---------------------+------------------+



Sarp KÖKSAL
SİSTEM MÜHENDİSİ
Mustafa Kemal Mahallesi 2120 Cad. No:39 06510 Çankaya Ankara TÜRKİYE
+90 312 219 57 87 +90 312 219 57 97
YASAL UYARI: Bu elektronik posta işbu linki kullanarak ulaşabileceğiniz Koşul ve Şartlar dokümanına tabidir.
LEGAL NOTICE: This e-mail is subject to the Terms and Conditions document which can be accessed with this link.
Lütfen gerekmedikçe bu sayfa ve eklerini yazdırmayınız / Please consider the environment before printing this email