Lokivirheiden analysointi

Transkriptio

1 Lokivirheiden analysointi

2 Lokivirheitä configuration_client.log proxy.log signer.log operointiohjeet listaavat muutamia valvottavia virhetilanteita

3 configuration-client.log 11:01:00 [QuartzScheduler_Worker 2] ERROR e.r.x.c.c.g.configurationclient Failed to download configuration from any configuration location: location: cs.i.palveluvayla.com/internalconf; error: HttpError: Network is unreachable location: cs2.i.palveluvayla.com/internalconf; error: HttpError: Network is unreachable Globaalin konfiguraation haku epäonnistui Kertoo osoitteet, mistä hakua yritettiin Verkko & palomuurit? Liityntäpalvelin on käyttökelpoinen 72 tunnin ajan

4 Proxy.log virheet Erilaisia virhekoodeja on yli 100: ErrorCodes.java Lokeihin tulostuvissa ja vastausviestissä näkyvissä virheissä voi näkyä virhekooditus, esimerkiksi Server.ClientProxy.NetworkError 07:39:04 [qtp ] ERROR e.r.x.p.c.fastestconnectionselectingsslsocketfactory Could not connect to any target host ([ lxd ss1.lxd:5500/]) 07:39:04 [qtp ] ERROR e.r.x.p.c.abstractclientproxyhandler Request processing error (38c8401f 577f 4c1a 9c5b 68ec45a74ea3) ee.ria.xroad.common.codedexception: Server.ClientProxy.NetworkError: Could not connect to any target host ([ lxd ss1.lxd:5500/]) at ee.ria.xroad.proxy.clientproxy.fastestconnectionselectingsslsocketfactory.couldno tconnectexception(fastestconnectionselectingsslsocketfactory.java:316) ~[proxy 1.0.jar:na]

5 Server.ClientProxy.NetworkError Component Error Code Component Client Server.ClientProxy Server.ServerProxy Signer Error Code

6 proxy.log esimerkkejä :26:14,021 [qtp ] ERROR e.r.x.p.c.abstractclientproxyhandler Request processing error ee.ria.xroad.common.codedexception$fault: Server.ServerProxy.CannotCreateSignature.Signer.TokenNotActive: Token 'softtoken' not active at ee.ria.xroad.common.codedexception.fromfault(codedexception.java:138) ~[proxy 1.0.jar:na] at ee.ria.xroad.common.message.soapfault.tocodedexception(soapfault.java:127) ~[proxy 1.0.jar:na] at Producer-liityntäpalvelimen PIN ei ollut syötetty

7 proxy.log esimerkkejä :28:11,038 [qtp ] ERROR e.r.x.p.c.abstractclientproxyhandler Request processing error (13370c c2 f f) ee.ria.xroad.common.codedexception: Server.ClientProxy.CannotCreateSignature.Signer.TokenNotActive: Token 'softtoken' not active at ee.ria.xroad.common.codedexception.tr(codedexception.java:173) ~[proxy 1.0.jar:na] at ee.ria.xroad.signer.util.exceptionhelper.tokennotactive(exceptionhelper.java:59) ~[na:na] Consumer-liityntäpalvelimen PIN ei ollut syötetty

8 proxy.log esimerkkejä :30:02,602 [qtp ] ERROR e.r.x.p.c.abstractclientproxyhandler Request processing error ee.ria.xroad.common.codedexception$fault: Server.ServerProxy.UnknownService: Unknown service: SERVICE:LXDJ/COM/500/SS1/NonExistent/v1 at ee.ria.xroad.common.codedexception.fromfault(codedexception.java:138) ~[proxy 1.0.jar:na] at ee.ria.xroad.common.message.soapfault.tocodedexception(soapfault.java:127) ~[proxy 1.0.jar:na] at Palvelua ei ole olemassa tällaisia virheitä ei kannata automaattivalvoa...

9 proxy.log :46:32,430 [Proxy akka.actor.default dispatcher 81] ERROR e.r.x.p.messagelog.timestamperworker Timestamper failed for message records [<record id>,...]: Failed to get time stamp from any time stamping providers Tämä ja muutamat muut timestamper failed virheet voivat johtua siitä että yhteyttä timestamperiin ei saatu Verkko & palomuurit? Viestinvälitys lakkaa 30 minuutin kuluessa

10 signer.log 19:14:20 INFO [Signer akka.actor.default dispatcher 2403] e.r.x.c.c.g.configurationdirectoryv2 /etc/xroad/globalconf/fi/private params.xml expired on T17:51: :00 19:14:20 WARN [Signer akka.actor.default dispatcher 2403] e.r.x.c.c.globalconf.globalconfimpl Global configuration is invalid: {} ee.ria.xroad.common.codedexception: OutdatedGlobalConf: /etc/xroad/globalconf/fi/private params.xml is too old at ee.ria.xroad.common.conf.globalconf.configurationdirectoryv2.verifyuptodate(configurationdirectoryv2. java:304) ~[signer 1.0.jar:na] at ee.ria.xroad.common.conf.globalconf.configurationdirectoryv2$walker.visitfile(configurationdirectoryv 2.java:225) ~[signer 1.0.jar:na] at ee.ria.xroad.common.conf.globalconf.configurationdirectoryv2$walker.visitfile(configurationdirectoryv 2.java:215) ~[signer 1.0.jar:na] at java.nio.file.files.walkfiletree(files.java:2670) ~[na:1.8.0_121] at java.nio.file.files.walkfiletree(files.java:2742) ~[na:1.8.0_121] at ee.ria.xroad.common.conf.globalconf.configurationdirectoryv2.eachfile(configurationdirectoryv2.java:2 12) ~[signer 1.0.jar:na] at ee.ria.xroad.common.conf.globalconf.configurationdirectoryv2.verifyuptodate(configurationdirectoryv2. java:314) ~[signer 1.0.jar:na] at ee.ria.xroad.common.conf.globalconf.cachingconfigurationdirectory.verifyuptodate(cachingconfiguration Directory.java:122) ~[signer 1.0.jar:na] OutdatedGlobalConf: /etc/xroad/globalconf/fi/private-params.xml is too old Globaali konfiguraatio on liian vanha Konfiguraation haku ei toimi Onko yhteys keskuspalvelimeen OK? configuration_client.log

11 signer.log :12:31,968 ERROR [Signer akka.actor.default dispatcher 2] e.r.x.s.certmanager.ocspclientworker Error when querying certificate '<certificate serial number>' org.bouncycastle.cert.ocsp.ocspexception: Unable to get valid OCSP response from any responders Tämä ja muutamat muut virheet OCSP avaisanalla voivat johtua siitä että yhteyttä OCSP responderiin ei saatu Verkko & palomuurit?

12 Varmenneongelma eri lokeissa

13 Producer-lipan sign-cert ei kunnossa :47:16,891 [qtp ] ERROR e.r.x.p.c.abstractclientproxyhandler Request processing error ee.ria.xroad.common.codedexception$fault: Server.ServerProxy.ServiceFailed.CannotCreateSignature: Failed to get signing info for member 'SUBSYSTEM:LXDJ/COM/500/SS1': Signer.UnknownMember: Could not find any certificates for member 'SUBSYSTEM:LXDJ/COM/500/SS1' at ee.ria.xroad.common.codedexception.fromfault(codedexception.java:138) ~[proxy 1.0.jar:na] at ee.ria.xroad.common.message.soapfault.tocodedexception(soapfault.java:127) ~[proxy 1.0.jar:na] Consumer / proxy.log

14 Producer-lipan sign-cert ei kunnossa :47:16,889 [qtp ] ERROR e.r.x.p.s.serverproxyhandler Request processing error (a3e009b2 ea7a f aaa ea) ee.ria.xroad.common.codedexception: Server.ServerProxy.ServiceFailed.CannotCreateSignature: Failed to get signing info for member 'SUBSYSTEM:LXDJ/COM/500/SS1': Signer.UnknownMember: Could not find any certificates for member 'SUBSYSTEM:LXDJ/COM/500/SS1' at ee.ria.xroad.proxy.conf.cachingkeyconfimpl.getsigningctx(cachingkeyconfimpl.java: 84) ~[proxy 1.0.jar:na] at ee.ria.xroad.proxy.conf.keyconf.getsigningctx(keyconf.java:122) ~[proxy 1.0.jar:na] Producer / proxy.log

15 Producer-lipan sign-cert ei kunnossa :47:16,872 ERROR [Signer akka.actor.default dispatcher 3] e.r.x.s.p.abstractrequesthandler Error in request handler ee.ria.xroad.common.codedexception: UnknownMember: Could not find any certificates for member 'SUBSYSTEM:LXDJ/COM/500/SS1' at ee.ria.xroad.common.codedexception.tr(codedexception.java:173) ~[signer 1.0.jar:na] at ee.ria.xroad.signer.protocol.handler.getmembersigninginforequesthandler.handle(ge tmembersigninginforequesthandler.java:68) ~[signer 1.0.jar:na] Producer / signer.log