SmartSense SSL Troubleshooting
SmartSense components make use of SSL for protecting communications between HST Server and HST Agent, and HST Server and SmartSense Gateway. If installation issues arise and those SSL certificates need to be generated, additional commands have been included to help automate that process.
HST Server
To reset the HST Server’s SSL certificate database, which will force all HST Agents to regenerate their certificates, use the hst reset command.
From the HST Server execute the following:
# hst reset Resetting SmartSense Server will remove server and all registered agent certificates and reset the certificate database. Do you want to continue? [y/n] (default: n): y SmartSense Server is currently running and needs to be stopped in order to reset. Do you want to stop the SmartSense Server? [y/n] (default: n): y SmartSense Server stopped SmartSense Server reset completed. Do you want to restart SmartSense Server? [y/n] (default: y): y Server PID at: /var/run/hst/hst-server.pid Server out at: /var/log/hst/hst-server.out Server log at: /var/log/hst/hst-serer.log Waiting for server start . . . . . . .
HST Agent
If an individual agent is having issues related to SSL when communicating with the HST Server, the hst reset-agent command can be used to remove all certificates registered with the HST Server for the specific agent.
From the HST Agent execute the following:
# hst reset-agent
Resetting SmartSense Agent will remove all certificates registered with SmartSense server. Do you want to continue? [y/n] (default: n): y
SmartSense Agent reset completed.
SmartSense Gateway
If HST Server’s are having issues related to SSL when communicating with the SmartSense Gateway, the hst gateway reset command can be used to remove all HST Server certificates registered with the specific SmartSense Gateway.
From the SmartSense Gateway execute the following:
# hst gateway reset Resetting SmartSense Gateway will remove all certificates and reset the certificate database. Do you want to continue? [y/n] (default: n): y SmartSense Gateway stopped SmartSense Gateway reset completed. Gateway has to be started to create new certificates. Do you want to start the Gateway? [y/n] (default: y): y SmartSense Gateway PID at: /var/run/hst/hst-gateway.pid SmartSense Gateway out at: /var/log/hst/hst-gateway.out SmartSense Gateway log at: /var/log/hst/hst-gateway.log Waiting for Gateway start . . . . . . . . . . SmartSense Gateway started.