After upgrade to 13.0.1 and upgrade of the plugins, they stop working with cert error

[mdiver]

We faced this issue after an upgrade of a VBR server in a customer environment from 12 to 13.0.1. The upgrade of VBR went flawlessly and afterwards the plugins - that still were on V12 of course - still worked fine.

We now wanted to align plugin versions again with V13, so we upgraded several managed HANA plugins to V13 via their protection group.
The upgrade of the plugin itself seems to have finished as it shows V13 in GUI now. But at the end of the plugin upgrade during the protection group rescan, a certificate error in a "post process" is shown.
Same error is also shown during each attempted backup run. The backups now fail.

Error message shown:

Code: Select all

"Error: The issuer certificate does not have a Basic Constraints extension. (Parameter 'issuerCertificate')"

It seems the communication now introduces some additional cert validation. How can I add this extension and to which certificate is that to be done?

Support case is filed with #07954174.

[Moderator: Replaced Support ID with Case ID]

Thanks,
Mike

[david.domask]

Hi Mike,

Probably best to wait for Support's confirmation on this, but I think you may be facing one of the situations described in this KB article: https://www.veeam.com/kb4687

You can do the validation steps on your own and confirm if an older certificate is still in use on the VBR server, but please wait for Support to confirm the remediation actions.

[mdiver]

Hi David. Thanks for your fast reply. I already had the idea to replace the self-signed as I expected this one to be responsible for the situation. But as there are other relations to the cert I refrained from doing it.

So, let's wait for support. Unfortunately, once plugins are involved, you have to provide tons of logs and this slows down the whole support process. This is not a HANA problem, that's for sure...

Thanks for fixing the case #. Copy/paste flaw...
I'll follow up here on the outcome.