TeamSite workflows not working - jobs are stuck in perl script execution

Hello there,

TS- 7.3.2

OS – RHEL 5

Issue: None of the workflows were moving. They all stuck on external tasks (perl script execution).

Iwtrace.log suggested that teamsite main process is unable to communicate to utild daemon. It was trying to connect utild but fails every time.

Nothing was changed on TeamSite server other than the new OS security patches. So we looked at the all the OS patch installs.

We upgraded open ssl libs from (0.9.8e-33.el5_11) to (0.9.8e-36.el5_11).

RED HAT: https://rhn.redhat.com/errata/RHSA-2015-1197.html

Note: This update forces the TLS/SSL client implementation in OpenSSL to reject DH key sizes below 768 bits, which prevents sessions to be downgraded to export-grade keys. Future updates may raise this limit to 1024 bits.

It seems TeamSite uses DH key of size smaller than 768 bits while communicating to utilid daemon and which is rejected by the new updated openssl.

We reverted openssl back to (0.9.8e-33.el5_11) and everything started working like charm.

We have raised this issue with HP support. Support has replied that they will take this to HP engineering and a patch for this may take couple of months or more.

I hope this update helps someone.

Thanks

Rajesh

Find more posts tagged with

Comments

Adam Stoller

They were just trying to force you to give up Perl and move to Java ;-)

Rajesh

I agree with you Adam Smiley Happy .

Rajesh

Hello All,

I got a response from HP Support, to fix this openssl issue. First upgrade the openssl lib and run the

<iwhome>/install/cert_install.pl

This should fix the problem. It will install the new certificate based on new openssl and should fix the problem. We will try this next week and I hope it works.

Thanks

Rajesh

Hp support asked us to pass the DH key size while building DH key params.

Actually, update

<iw-home>/install/cert_install.pl near line # 230 or so like

from

system("$openssl dhparam -2 -out $app{$appname}/dh.pem");

system("$openssl dhparam -2 -out $app{$appname}/dh.pem 1024");

save the file.

stop TeamSite

run the script and regenrate the certificate, it will say it is creating key size or 1024 bits instead of default 512 bits.

start TeamSite and it should work fine.

HTH.

Thanks

Rajesh