Guest

Preview Tool

Cisco Bug: CSCvh77841 - generate opflex odev certs for 20 years on fresh apic install

Last Modified

Jul 03, 2019

Products (1)

  • Cisco Application Policy Infrastructure Controller (APIC)

Known Affected Releases

3.1(1.78a)

Description (partial)

Symptom:
Opflex channels are "Disconnected"

Leaf /var/log/dme/log/svc_ifc_opflexelem.log has the following traces:
Leaf# less svc_ifc_opflexelem.log
31931||19-04-23 15:12:16.289-04:00||ifm||DBG3||co=ifm||incoming connection to peer terminated (protocol error)||../dme/common/src/ifm/./Peer.cc||227
31931||19-04-23 15:12:46.503-04:00||ifm||DBG4||co=ifm||incoming connection established from 10.230.160.66:39490||../dme/common/src/ifm/./ServerEventHandler.cc||48   bico 16.289
31931||19-04-23 15:12:46.793-04:00||ifm||ERROR||co=ifm||openssl error during SSL_accept()||../dme/common/src/ifm/./IFMSSL.cc||223
31931||19-04-23 15:12:46.793-04:00||ifm||ERROR||co=ifm||openssl: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed||../dme/common/src/ifm/./IFMSSL.cc||236

Conditions:
AVE/AVS installation
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.