Symptoms

After installation of OA Update 8, OACI VE console is not working for all virtual environments on a specific Virtuozzo host.

The console fails with the message:

Connection was reset by peer

The Virtuozzo host shows that the Remote Display port is listened by stunnel process:

[root@vz ~]# prlctl list -if test-vm | grep port=
Remote display: mode=auto port=5869 address=0.0.0.0

[root@vz ~]# netstat -antp | grep 5869
tcp        0      0 0.0.0.0:5869                0.0.0.0:*                   LISTEN      946186/stunnel

Cause

With Update 8, VE console was switched from Java applet to HTML5 based console utilizing HTTP web sockets with Branding host proxying connections to Virtuozzo node. This removes the necessity to use stunnel to secure remote VNC connections. Therefore, after Update 8 is installed, task to install paci_hn_psbm-6.0.61 package on the Virtuozzo node removes the VNC encryption key from the node. For some reason it may not happen for some Virtuozzo node.

Resolution

  1. Check that there is no failed task to install paci_hn_psbm package on the node. In case there is, make sure it completes successfully. You can verify that version is 6.0.61 on Service nodes > Node > Packages screen.
  2. Remove the VNC encryption key manually, run the following command on the Virtuozzo node with non-working VE console:

    # bash /usr/local/pem/bin/rmselfsignedcert
    

Internal content