Logs are there really... I have looked for some other pattern, but here they are:
2014-01-10 16:40:34,818 INFO  [InventoryManager.availability-1] (rhq.core.pc.inventory.AvailabilityExecutor)- Scan Starting: Fri Jan 10 16:40:34 CET 2014
2014-01-10 16:40:34,883 ERROR [ResourceContainer.invoker.daemon-7] (org.rhq.plugins.netservices.HTTPNetServiceComponent)- javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
2014-01-10 16:40:34,883 INFO  [InventoryManager.availability-1] (rhq.core.pc.inventory.AvailabilityExecutor)- Scan Ended   : Fri Jan 10 16:40:34 CET 2014 : Scan [startTime=1389368434818, endTime=1389368434883, runtime=65, isFull=true, isForced=false, numResources=1, numGetAvailabilityCalls=1, numScheduledRandomly=0, numPushedByInterval=1, numAvailabilityChanges=0, numDeferToParent=0]
...

It's a Debian system with Oracle Java 6. The server certs are not self signed, but the CA is not a very well known one.

Thanks for the advice, will come back soon with the result! 

:)

Have a nice weekend!

Attila


2014/1/10 Thomas Segismont <tsegismo@redhat.com>
Le 10/01/2014 15:56, Attila Heidrich a écrit :
I have found the clues I guess... keystore stuff should be in
<agent-dir>/conf according to the java default prefs
   <entry key="rhq.agent.client.security.keystore.file"
value="/opt/rhq-agent/conf/keystore.dat"/>
   <entry key="rhq.agent.client.security.truststore.file"
value="/opt/rhq-agent/conf/truststore.dat"/>

but no such entries in the current config, and the whole section is
commented in the agent-configuration.xml.

A


2014/1/10 Attila Heidrich <attila.heidrich@gmail.com
<mailto:attila.heidrich@gmail.com>>


    No error message, at least not in agent.log.

^^ that's weird, HTTPNetServiceComponent logs exceptions at error level

https://git.fedorahosted.org/cgit/rhq/rhq.git/tree/modules/plugins/netservices/src/main/java/org/rhq/plugins/netservices/HTTPNetServiceComponent.java#n212



    I also think it should be related to the SSL communication, like the
    CAs key is not in the Java/Jboss keystore. Unfortunately, I do not
    know, how to install it, and can not find a howto either.


You're running a Debian bases system IIRC? Do you use OpenJDK or did you correctly setup OracleJDK as an alternative? If you did, then I recommend you follow this method:
http://blog.chmouel.com/2010/06/03/connecting-to-self-signed-ssl-certificate-from-java-on-debian-ubuntu/

The idea is basically to install your CA certificate in the system folder for certificates ("/etc/ssl/certs") and then to run "update-ca-certificates". Then all systems tools (curl and friends) and the JVM will recognize your CA.


Thomas
_______________________________________________
rhq-users mailing list
rhq-users@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/rhq-users