We have two AAEP systems that were upgraded from EP 7.0. One site is running 7.1 and one is running 7.2. At both sites, the EP configurable variables no longer work. The application shows it attempting to fetch the configurable variables, but it returns null. The application then runs with the default values set to the variables.

Orchestration Designer 07.01.08.04
Tomcat 7.0.57
Java 1.7.0_45

I have reviewed several other posts about issues with the variable communication, but none seem to address the issue we are having. Is there a document that lists the steps required to setup the configurable variables? What steps are needed to allow the secure communication between Tomcat and AAEP? I assume that this was working before on 7.0 using http URLs instead of https.

Trace.log snippet:
05/01/2018 15:48:10:996 INFO - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Using SCESession D5B9B44D367135880B122F55241AA853:/IVRCallSurvey servlet : Start
05/01/2018 15:48:10:997 INFO - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : ** Pushed Stack Frame [/IVRCallSurvey]
05/01/2018 15:48:10:997 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Creating variable [EP_PhrasePath_Standard] from factory [com.avaya.vp.admin.variables.runtime.AdminVariableFactory]
05/01/2018 15:48:10:997 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Admin SimpleVariable:getSimpleVariable(): return admin simple variable - EP_PhrasePath_Standard
05/01/2018 15:48:10:997 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Creating variable [EP_SurveyID] from factory [com.avaya.vp.admin.variables.runtime.AdminVariableFactory]
05/01/2018 15:48:10:997 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Admin SimpleVariable:getSimpleVariable(): return admin simple variable - EP_SurveyID
05/01/2018 15:48:10:997 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Creating variable [EP_PhraseFilePath] from factory [com.avaya.vp.admin.variables.runtime.AdminVariableFactory]
05/01/2018 15:48:10:997 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Admin SimpleVariable:getSimpleVariable(): return admin simple variable - EP_PhraseFilePath
05/01/2018 15:48:10:997 INFO - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Storing :session___sessionid to complex: session:sessionid as [aaep-pre-2018005204810-10]
05/01/2018 15:48:10:998 INFO - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : runtime_platform : Experience Portal
05/01/2018 15:48:10:998 INFO - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : runtime_asr : SRGS-Literals
05/01/2018 15:48:10:999 INFO - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : MessageType is speech
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Initializer:applicationStarted:Initializing admin variables...
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Initializer:applicationStarted:__VPVarAppDate is 1515185242361
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Initializer:applicationStarted:Timestamp is 01/05/18 15:47:22
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : Initializer:applicationStarted:Appname is 0:TEST_Survey
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : AdminVarCache:init: Timestamp is different; Load parameters....
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : AdminVarCache:init: Module? false
05/01/2018 15:48:10:999 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : AdminVarCache:init: load data from the Voice Portal/Experience Portal platform
05/01/2018 15:48:11:004 ERROR - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : VPClientProxy:VPAppRuntimeVars.getAppRuntimeVars returns null
05/01/2018 15:48:11:004 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : AdminVarCache:init: no data comes back from proxy.
05/01/2018 15:48:11:004 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : app params: {}
05/01/2018 15:48:11:004 DEBUG - D5B9B44D367135880B122F55241AA853:/IVRCallSurvey : AdminVarCache:init: Finish loading.



Here is a snippet from the vpAppLogClient.log

2018-01-08 10:32:37,687 239730759 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] INFO - AlarmMonitorThread.logAlarms() - return status code: FAILED_RETRY from alarm URL: https://172.16.115.23/axis2/services/VPAppLogService
2018-01-08 10:32:37,687 239730759 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] INFO - AlarmMonitorThread.logAlarms() - Failed to log alarm, retry alarm URL: https://172.16.115.23/axis2/services/VPAppLogService
2018-01-08 10:32:38,687 239731759 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] DEBUG - VPAppLogClientBase.getEPMWebServicesClientBase() - return epmWebSErvicesClientBase...
2018-01-08 10:32:38,687 239731759 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] DEBUG - AlarmMonitorThread:EPMWebServicesClientBaseImpl:logAlarmsAxis2() calling to send to VPMS: https://172.16.115.23/axis2/services/VPAppLogService
2018-01-08 10:32:38,692 239731764 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] INFO - AlarmMonitorThread:EPMWebServicesClientBaseImpl:logAlarmsAxis2() - BEGIN Logging ALARMS entry size: 1 to URL: https://172.16.115.23/axis2/services/VPAppLogService from AE server: c4vaaepapp-pp-u First SID: aaep-pre-2018005205729-13 Last SID: aaep-pre-2018005205729-13
2018-01-08 10:32:38,697 239731769 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] ERROR - AlarmMonitorThread:EPMWebServicesClientBaseImpl:logAlarmsAxis2() - Caught Exception FAILED with AxisFault faultCode: null error: Received fatal alert: protocol_version to log entry size: 1 to URL: https://172.16.115.23/axis2/services/VPAppLogService from AE server: c4vaaepapp-pp-u First SID: aaep-pre-2018005205729-13 Last SID: aaep-pre-2018005205729-13 NOTE: It could be caused by this VPMS is not online or some other network issues.
org.apache.axis2.AxisFault: Received fatal alert: protocol_version
at org.apache.axis2.AxisFault.makeFault(AxisFault.java:430)
at org.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:98)
at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:499)
at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)
at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
at org.apache.axis2.transport.http.AbstractHTTPSender.executeMethod(AbstractHTTPSender.java:621)
at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:193)
at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:404)
at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:231)
at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:443)
at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:406)
at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:229)
at org.apache.axis2.client.OperationClient.execute(OperationClient.java:165)
at com.avaya.xml.ws.vpapplog.voiceportal.VPAppLogServiceStub.logApplicationEventAlarm(VPAppLogServiceStub.java:223)
at com.avaya.vp.ws.EPMWebServicesClientBaseImpl.logAlarmsAxis2(EPMWebServicesClientBaseImpl.java:288)
at com.avaya.vp.applog.client.AlarmMonitorThread.logAlarms(AlarmMonitorThread.java:159)
at com.avaya.vp.applog.client.AlarmMonitorThread.run(AlarmMonitorThread.java:105)
at java.lang.Thread.run(Thread.java:745)
Caused by: javax.net.ssl.SSLException: Received fatal alert: protocol_version
at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1959)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1077)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:702)
at sun.security.ssl.AppOutputStream.write(AppOutputStream.java:122)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:82)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:140)
at java.io.FilterOutputStream.flush(FilterOutputStream.java:140)
at org.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:94)
... 20 more
2018-01-08 10:32:38,697 239731769 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] INFO - AlarmMonitorThread.logAlarms() - return status code: FAILED_RETRY from alarm URL: https://172.16.115.23/axis2/services/VPAppLogService
2018-01-08 10:32:38,697 239731769 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] INFO - AlarmMonitorThread.logAlarms() - Failed to log alarm, retry alarm URL: https://172.16.115.23/axis2/services/VPAppLogService
2018-01-08 10:32:39,698 239732770 [VPAlarmMonitorThread: https://172.16.115.23/axis2/services/VPAppLogService] ERROR - AlarmMonitorThread: Failed to log alarms to: https://172.16.115.23/axis2/services/VPAppLogService sleep for 5 minutes and retry again
2018-01-08 10:32:54,669 239747741 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] INFO - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService reachs the maximum allowed monitored hours: 24 hours, exiting
2018-01-08 10:32:54,669 239747741 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] INFO - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService :Trying to check network reachable 172.16.115.23
2018-01-08 10:32:54,669 239747741 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] INFO - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService :nework 172.16.115.23 is not reachable, set status to NOTREACHABLE, continue monitoring
2018-01-08 10:32:54,669 239747741 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] DEBUG - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService sleep for 1 minute
2018-01-08 10:33:54,669 239807741 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] INFO - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService reachs the maximum allowed monitored hours: 24 hours, exiting
2018-01-08 10:33:54,670 239807742 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] INFO - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService :Trying to check network reachable 172.16.115.23
2018-01-08 10:33:54,670 239807742 [VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService] INFO - AppRuntimeVarsMonitor: VPAppRuntimeVarsMonitorThread: https://172.16.115.23/axis2/services/VPAppVarsService :nework 172.16.115.23 is not reachable, set status to NOTREACHABLE, continue monitoring

We have tried to fetch the AAEP axis2 certificate into the OD trust store via runtimeconfig, but it fails to fetch the certificate.

Thank you.

Okay with EP 7.2 it only uses TLSv1.2. To make EP accept less that TLS v1.2 you need to run a script

/opt/Avaya/ExperiencePortal/Support/Security-Tools/ ConfigureLegacyTLS.sh

I am not sure the issue on Ep 7.1

I ran the script on the 7.2 EP and get a handshake error instead. Can you provide a link to the document listing the steps needed to setup this communication? I've reviewed the AAEP and OD documentation and can't find a clear direction on what is required.

We tried to fetch the AAEP certificate into the OD store (via runtimeconfig) and it fails to fetch the certificate.
http://<AAEP_IP/axis2

Attached is the log from the vpAppLogClient.log on the 7.2 system after running the security shell script.

I talked to the EP folks and they say:

The script “ConfigureLegacyTLS.sh” will enable TLS1.0 and TLS1.1 but still disable SSLv3 and support strict ciphersuites.

The customer is using a Java version that enable SSLv3 by default.

My recommendation are as the following:

- Upgrade OD to at least 7.1
- Upgrade JRE on the Tomcat:

• Servers using Oracle JDK 1.7.0 must use Oracle JDK 1.7.0 Update 131 or later.
• Server using Oracle JDK 1.8.0 or higher, no change is required.