Can't add Storage provider

[Serhii Dovbakh]

Hello,

I'm trying to add a storage proider in vCenter server 8.0, but get an error "The specified provider URL is invalid."
Copied url of my storage provider from HPE 3PAR showvasa output: https://10.0.0.5:9997/vasa
In /var/log/vmware/vmware-sps/sps.log I see an ERROR:
Error during the validation of the provider URL
org.bouncycastle.tls.TlsFatalAlertReceived: handshake_failure(40)
SSL certificates are OK and I've checked the connection with openssl s_client -connect 10.0.0.5:9997. Handshake is OK:
SSL handshake has read 1711 bytes and written 615 bytes
Verification: OK
Please advise me on the right way to solve this problem.

[Shen88]

@Serhii Dovbakh,

Although your openssl test passes, vCenter uses a stricter and different Java-based TLS implementation. The error; typically indicates a TLS version or cipher mismatch between vCenter and the storage provider.

vCenter 8.0 enforces TLS 1.2+ however if HPE 3PAR VASA provider is exposing only older protocols like TLS 1.0 or 1.1, the handshake will fail. So, verify the TLS version on 3PAR system, also make sure the cipher suites are not deprecated. Above all this, you may need to look at importing the 3PAR VASA certificate into the vCenter.

------------------------------
If you find this answer right, please 'Recommend' this post.

Thank you!

Regards,
Shen
------------------------------

[Serhii Dovbakh]

@Shen88,

Thank you for your relpy.
I tried ot connect with tls 1.2 by openssl and it worked:
openssl s_client -connect 10.0.0.5:9997 -tls1_2
SSL handshake has read 1711 bytes and written 512 bytes
Verification: OK
---
New, TLSv1.2, Cipher is AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : AES256-GCM-SHA384
So, 3PAR accepts tls 1.2. Imported CA and client certificate (signed by this CA) to 3par. It was imported to vcenter too. 
But still no luck :(