IBM Security QRadar

 View Only
  • 1.  Error while migrating apps from console to apphost

    Posted Wed March 16, 2022 07:42 AM
    hi,


    i"'m facing Error while migrating apps from console to apphost: in step 4/7 : process of starting apps in the apphost : the root cause is that the host name verified is not in subject alternative name 

    the error is
    Error Code (33809): There was a problem starting apps on target host [Unable to sync service on host [https://XXXXXXXXXXXXXX.localdeployment:9000/v1/api/]]
    in the qradar.log :

    javax.net.ssl.SSLPeerUnverifiedException: Hostname xxxxxxxxxxxxxxxxxxxxx.localdeployment not verified:
    certificate: sha1/rrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr=
    DN: CN=APPHOST.qradar
    subjectAltNames: [172.d.d.d, APPHOST.qradar, yyyyyyyyyyyyyyyyyyyyyyyy.localdeployment]

    /////////////////////////////
    xxxxxxxxxxxxxxxxxxxxx.localdeployment is present in /etc/hosts for both console and apphost  
    if any one have an idea ,please 

    thanks

    ------------------------------
    jalloul mustapha
    ------------------------------


  • 2.  RE: Error while migrating apps from console to apphost

    Posted Wed March 16, 2022 08:03 AM
    i'm in Qradar 7.4.2 fixpack 3

    ------------------------------
    jalloul mustapha
    ------------------------------



  • 3.  RE: Error while migrating apps from console to apphost

    Posted Wed March 16, 2022 09:05 AM
    Hi! how are you?

    check that you can resolve the dns name of the apphost from console and the console from apphost. See the /etc/hosts file.

    Also you can check using telnet that you have port 9000 open.

    The following documentation show you the port that uses Qradar  


    Regards!





  • 4.  RE: Error while migrating apps from console to apphost

    Posted Wed March 16, 2022 09:30 AM
    hi , thank you for the reply ,
    how are you 


    i do check all required ports :9000 14433 5000,all seems good 
    i do check also hosname in /etc/hosts  and it is very well.

    the probleme is that  the hostname that is present in the etc/hosts is not compatible with  dn in the certificate subject alternative name  witch is the root cause of the error in ssl verification process ,in the step of running apps in the app host

    ------------------------------
    jalloul mustapha
    ------------------------------