Symptom
Getting alarms: Queue Link Error: Message=From XXXX To XXXX; Cause={ tls_alert;{unknown_ca;"tls Client: In State Certify At Ssl_handshake.erl:1887 Generated Client Alert: Fatal - Unknown Ca\n"}
Conditions
Upgrade to ISE 3.1
Workaround
if getfacl is as mentioned in the bug description please do the following:
1. setfacl -R -m group:ise:rwx /opt/rabbitmq/cert
2. Regenerate IMS certs
check for expected output of ls:
ls -lrt /opt/rabbitmq/cert
-rwxrwxr--+ 1 iserabbitmq ise 5285 Oct 25 05:58 containerservercertandkey.pem
-rwxrwxr--+ 1 iserabbitmq ise 7897 Oct 25 05:59 containercacert.pem
Further Problem Description
After upgrading from 3.0 to 3.1, from a node the rebbitmq certificate got broken generating "Queue link error" alarms.
