Initial config proxy certificate error

[lucasbernadsky]

Hi! I'm trying to install skyline 2.6 but I keep getting a proxy certificate error.

I tried Network connectivity fails but it didn't solve my issue.

I could configure the proxy in the :5480 console without issues but there is no way to configure it in the wizard. Any ideas? Any way to bypass certificate trust validation?

Error:

Could not connect successfully! Please try again - Test failed - Couldn't perform test registration due to: UploadException: Failed to upload due to exception >>> HttpRequestException: Certificate is not trusted >>> CertificateException: Certificate is not trusted. This connection cannot continue >>> ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target >>> SunCertPathBuilderException: unable to find valid certification path to requested target

Thanks

[sri_vmware]

linxandrewmoore​,

Welcome to Skyline Communities!!!.

Thank you for confirming, that you have attempted the steps as listed in Network connectivity fails

Please confirm if there are any firewall rules, which might be blocking access to vcsa.vmware.com.

Kindly share the contact details by using the below link to further assist.

Smartsheet Forms

[nachogonzalez]

Hi Srikanth, I work with lucas and I've been assisting him.
We are using a transparent proxy on a mgmt network with no internet access, other vms configured with the same proxy can reach (for example) dockerhub or google 
The proxy has no certificate configured, so the steps detailed here https://communities.vmware.com/t5/Skyline-Community-Discussions/Network-connectivity-fails/m-p/27470... have no utility. 

We can get to the proxy and check it's functionality.
Also, if the proxy is configured via VAMI (or 5480 it checks almost instantly) but still we can not go on.

Please let us know.

Warm regards

[sri_vmware]

@nachogonzalez ,

Please configure proxy from Skyline Collector UI.

1.Open a web browser and enter the URL for the Skyline Collector(https://skyline_collector_ip_address_or_fqdn)
2.Enter the user name admin and associated password.
3.Configure Proxy and perform test connectivity

If the connectivity fails, log into the Skyline Collector VM console using root and associated password from webclient.
Execute the below command and share the result

curl -v telnet://vcsa.vmware.com:443 -x http://proxyserver:port -I -k -u username:password.

Kindly share the contact details via the below link so that we can connect to further troubleshoot

https://app.smartsheet.com/b/form/9e31b64730f2419ba2aa50f6c72e66a3

[lucasbernadsky]

Hi there! Thank you for your reply.

Unfortunately I'm still getting the same error:

Admin interface proxy works fine and can download updates succesfully.

I think I will contact GSS and open a SR

[Doc_r]

I am facing this same issue, did you get anywhere with GSS on this?

[sri_vmware]

@Doc_r,

Welcome to Skyline Communities !!!

Kindly confirm if you are also using Proxy? Share the output from the below command

curl -v https://vcsa.vmware.com:443 -x http://proxyserver:port -I -k -u username:password.

Also, share the contact details via the below link so that we can connect to further troubleshoot

https://app.smartsheet.com/b/form/9e31b64730f2419ba2aa50f6c72e66a3

[nachogonzalez]

We are currently working on it.
@lucasbernadsky will share the results.

Just to know, do you have a transparent proxy?

[nachogonzalez · Accepted solution]

We solved this by accepting the proxy's certificate on java trust store.

Will try to post on my blog.

[evfernandez]

Hi @Doc_r 

I'm eager to know if the last response on this thread helps you too.

Awaiting your response.

Regards,
Eddie

[Doc_r]

Sorry for the late reply on this.

I was able to get connection working after a couple of tries and recycle of appliance.

Not sure as to the full resolution, but my connectors are up and running without issue.

[sysadminshow]

For me this was a DNS issue.  I was able to login to the shell with the admin account and add a DNS entry to the network config file.

Example: DNS=8.8.8.8 

Configuring Network Interfaces · VMware Photon OS 3.0 Documentation