Synametrics Technologies

Hello,

Previously I provide my own cert.  I renewed support, since my ssl expired and figured might as well get updated.  I was surprised to see LetsEncrypt support, which is great.  I opened up port 80 on firewall and tested access from outside and all good.    When I attempt to enable Lets Encrypt (I checked Test), I get an error ,An internal server error occurred. Please refer to SynaMan.log on the machine where SynaMan is installed for further information.    and I go look at log and nothing there with todays date indicates error...see below

2020-02-27 16:28:15,343 INFO sradef.BootLoader - Working directory: C:\SynaMan
2020-02-27 16:28:15,421 INFO wefmanager.Ignition - Starting up. Build: 1533
2020-02-27 16:28:15,906 INFO wefmanager.Ignition - Initialization completed successfully in 485 ms.
2020-02-27 16:28:15,906 INFO sradef.BootLoader - Starting web server on port(s): 80 and 6060
2020-02-27 16:28:18,233 INFO x.a - SSLProtocols: SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2
2020-02-27 16:28:18,233 INFO x.a - Certificate keystore: C:\SynaMan\htdocs\sslCert\synaman.pfx
2020-02-27 16:28:18,233 INFO x.a - Keystore type: PKCS12
2020-02-27 16:28:20,155 INFO sradef.BootLoader - Web server on port(s): 80 and 6060
2020-02-27 16:28:20,155 INFO sradef.BootLoader - This is a single host system

srvstderr.log has soemthing though.... do I need updated JRE maybe?  Looks like its installed in SYNAMAN sub folder.

Feb 27, 2020 4:28:19 PM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Feb 27, 2020 4:28:19 PM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet Engine: Apache Tomcat/8.5.40
Feb 27, 2020 4:28:19 PM org.apache.catalina.startup.ContextConfig getDefaultWebXmlFragment
INFO: No global web.xml found
Feb 27, 2020 4:28:20 PM org.apache.tomcat.util.descriptor.web.SecurityConstraint findUncoveredHttpMethods
SEVERE: For security constraints with URL pattern [/*] only the HTTP methods [DELETE OPTIONS PUT] are covered. All other methods are uncovered.
Feb 27, 2020 4:28:20 PM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-127.0.0.1-55222"]
Feb 27, 2020 4:28:20 PM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-10.20.0.21-80"]
Feb 27, 2020 4:28:20 PM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-10.20.0.21-6060"]
Feb 27, 2020 4:30:10 PM org.apache.catalina.core.StandardWrapperValve invoke
SEVERE: Servlet.service() for servlet [FrontController] in context with path [] threw exception [Servlet execution threw an exception] with root cause
java.lang.UnsupportedClassVersionError: org/shredzone/acme4j/exception/AcmeException : Unsupported major.minor version 52.0

I have a feeling you're using an older JRE on your SynaMan. The error: Unsupported major.minor version 52.0 leads me to believe this. Please visit https://web.synametrics.com/Update-JRE.htm to update your JRE. Once done, it should work fine.

Thanks.  I updated JRE and restarted.

When I go to enable Lets Encrypt I get error : Unable to establish session with LetsEncrypt. Network error

I goto Troubleshooting and it tells me 

Local Firewall Port 80 is configured
Port 6060 is configured
Port 443 is configured

Connection to HTTP port 80: and 6060  Users from the Internet won't be able to connect. See details below

Connection to HTTPS port 443:Users from the Internet will be able to connect to this server either using a web browser.

However, I can connect from outside connection using port 80.  I jut use my cell phone and turn off wifi and use cellular data connection and host name resolves. Note: My internet firewall will not let me used a FQDN name for a machine that is NAT'd through firewall.  Windows Firewall configured to allow Ports 80 and 443  and my network firewall nat rule allows 80 and 443 to this host for  Synaman.

From Synaman.log

2020-02-28 11:51:28,135 INFO wefmanager.Shutdown - Shutting down...
2020-02-28 11:51:28,135 ERROR sradef.BootLoader - Unable to stop web server. An invalid Lifecycle transition was attempted ([before_stop]) for component [StandardServer[-1]] in state [DESTROYED]
2020-02-28 11:51:34,495 INFO sradef.BootLoader - -------------------- New Instance started --------------.
2020-02-28 11:51:34,573 INFO sradef.BootLoader - Working directory: C:\SynaMan
2020-02-28 11:51:34,651 INFO wefmanager.Ignition - Starting up. Build: 1533
2020-02-28 11:51:35,354 INFO wefmanager.Ignition - Initialization completed successfully in 703 ms.
2020-02-28 11:51:35,354 INFO sradef.BootLoader - Starting web server on port(s): 80 and 6060
2020-02-28 11:51:37,687 INFO x.a - SSLProtocols: SSLv2Hello,TLSv1,TLSv1.1,TLSv1.2
2020-02-28 11:51:37,687 INFO x.a - Certificate keystore: C:\SynaMan\htdocs\sslCert\synaman.pfx
2020-02-28 11:51:37,687 INFO x.a - Keystore type: PKCS12
2020-02-28 11:51:39,844 INFO sradef.BootLoader - Web server on port(s): 80 and 6060
2020-02-28 11:51:39,860 INFO sradef.BootLoader - This is a single host system
2020-02-28 11:52:50,732 INFO o.d - Initializing Tor Nodes...
2020-02-28 11:52:50,779 ERROR o.d - Unable to fetch list of TOR exits. Error: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
2020-02-28 11:52:50,779 ERROR o.d - Unable to fetch list of TOR exits. Error: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
2020-02-28 11:52:50,779 ERROR o.d - Unable to fetch list of TOR exits. Error: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
2020-02-28 11:53:08,187 ERROR o.d - Unable to fetch list of TOR exits. Error: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
2020-02-28 11:53:08,188 ERROR o.d - Unable to fetch list of TOR exits. Error: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext)
2020-02-28 11:53:20,857 ERROR synssl.B - Root cause: java.net.SocketException. AcmeException: Network error

From srvStdErr.log

INFO: Initializing ProtocolHandler ["http-nio-10.20.0.21-6060"]
Feb 28, 2020 11:46:49 AM org.apache.tomcat.util.net.NioSelectorPool getSharedSelector
INFO: Using a shared selector for servlet write/read
Feb 28, 2020 11:46:49 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["https-jsse-nio-10.20.0.21-443"]
Feb 28, 2020 11:46:50 AM org.apache.catalina.core.StandardService initInternal
SEVERE: Failed to initialize connector [Connector[HTTP/1.1-443]]
org.apache.catalina.LifecycleException: Failed to initialize component [Connector[HTTP/1.1-443]]
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:112)
at org.apache.catalina.core.StandardService.initInternal(StandardService.java:552)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)
at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:875)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)
at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:140)
at org.apache.catalina.startup.Tomcat.start(Tomcat.java:427)
at com.synametrics.x.a.D(EmbeddedTomcat8.java:549)
at com.synametrics.sradef.BootLoader.D(BootLoader.java:432)
at com.synametrics.sradef.BootLoader.startTomcat(BootLoader.java:375)
at com.synametrics.sradef.BootLoader.main(BootLoader.java:125)
at com.synametrics.wefmanager.installer.ServerService.main(ServerService.java:29)
at com.synametrics.wefmanager.installer.ServerService.start(ServerService.java:25)
Caused by: org.apache.catalina.LifecycleException: Protocol handler initialization failed
at org.apache.catalina.connector.Connector.initInternal(Connector.java:995)
at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)
... 12 more
Caused by: java.lang.IllegalArgumentException: keystore password was incorrect
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:100)
at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:72)
at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:244)
at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1105)
at org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.java:224)
at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:581)
at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:68)
at org.apache.catalina.connector.Connector.initInternal(Connector.java:993)
... 13 more
Caused by: java.io.IOException: keystore password was incorrect
at sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2059)
at java.security.KeyStore.load(KeyStore.java:1445)
at org.apache.tomcat.util.security.KeyStoreUtil.load(KeyStoreUtil.java:69)
at org.apache.tomcat.util.net.SSLUtilBase.getStore(SSLUtilBase.java:209)
at org.apache.tomcat.util.net.SSLHostConfigCertificate.getCertificateKeystore(SSLHostConfigCertificate.java:206)
at org.apache.tomcat.util.net.SSLUtilBase.getKeyManagers(SSLUtilBase.java:272)
at org.apache.tomcat.util.net.SSLUtilBase.createSSLContext(SSLUtilBase.java:239)
at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:98)
... 20 more
Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption.
... 28 more

Feb 28, 2020 11:46:50 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Tomcat]
Feb 28, 2020 11:46:50 AM org.apache

Could you please contact us via email and send us the following information:

1. Your public URL. We will try connecting from our end to your port 80
2. Log in as admin to your SynaMan's web interface. Go to About. This will change the URL in your browser to ...operation=about . Manually change the URL to ...operation=sinfo . Send us a screenshot of the following page.