since some months, the services do not start automatically, and we have to run manually rc.start...
it was not a serious issue, bat this morning, i tried to understand the reasons, and i found some logs with an error WrapperSimpleAppMain| com.aris.prov.http.server.HttpServer - SSL DISabled!
We havge installed a certificat and are using SSL..
so i make a change in ACC with "set enable.ssl=true
but the result is that and it's no longer possible to start ACC...
So i cannot rollback on my acc modif...
a way to make the change set enable.ssl=false without ACC.. ???
0
4k
4
by Martin Schröder
Posted on Sat, 04/13/2019 - 11:37
Salut Pierre
you can enter the set Command into the acc config file
ARIS has two separate SSL infrastructures. If you say , you installed an SSL certificate and use SSL, you refer to the standard SSL infrastructure with the certificate enhanced in the loadbalancer and the SSL enabled in the ARIS modeling clients.
The ACC/Agent system has its own SSL infrastructure.
In order to enable it correctly, you need to import your certificate also in the agent service truststore (keystore.jks), configure key alias/truststore password in the agent using an ACC and enable it at the agent side with " set enable.ssl=true ".
If this is done correctly, you have to use SSL connection with the ACC client from now on, either by using the ACC command line switch "-SSL" or using the mentioned"set acc config enable.ssl=false " method with generated.apptypes.cfg.
Take note:
client side (ACC) : set acc config enable.ssl=false
server side (agent service) set enable.ssl=true ".
Regarding your problem..
You enabled SSL at the agent service without the proper SSL certificate and configuration which causes the service to hang because it cannot access its SSL cert.
If you want to go back..
The is an agent.user.cfg file located at the server side (<ARIS installation directory>\server\bin\agent.user.cfg which contains all user changed values. Edit it and remove the "set enable.ssl=true" entry and restart the service
If you want to go forward... (after going back ;-) in order to reach the ACC console again )
use "show cfg verbose " and look at the ssl.* entries telling you loction and default truststore password.
