Cisco License Manager can't check license portal.

[mascapolla]

Hi. I have a Cisco License Manager working for a couple of years, but for a month ago it can't check the license portal.

Steps to reproduce: in the CLM Client: Troubleshoot --> Check License Portal.

The error is:
Status: Operation encountered an error.
Status Code: 6007
Fault: Error in connecting with Cisco Product License Registration Server.
Detailed Message: Connection failed. Possible reason: Swift server is down.
Possible Cause: Error occurred due to SSL handshake, network connection or request has invalid Cisco.com account in.
Possible Remedy: Check Cisco.com account, check network connection.

The cisco.com account is correct, with the user/pass I can login in the License Administration Portal and assign the licenses manually.

I have captured the traffic with tshark during the check, and this is the negotiation:

Frame 8: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) on interface 0
Ethernet II, Src: xx:xx:xx:14:a6:4a, Dst: xx:xx:xx:e4:de:4e
Internet Protocol Version 4, Src: 200.123.xxx.xxx, Dst: 173.37.145.8
Transmission Control Protocol, Src Port: 43984 (43984), Dst Port: 443 (443), Seq: 1, Ack: 1, Len: 80
Secure Sockets Layer
    TLSv1.2 Record Layer: Handshake Protocol: Client Hello
        Content Type: Handshake (22)
        Version: SSL 3.0 (0x0300)
        Length: 75
        Handshake Protocol: Client Hello
            Handshake Type: Client Hello (1)
            Length: 71
            Version: SSL 3.0 (0x0300)
            Random
                GMT Unix Time: Aug 19, 2016 15:40:53.000000000 Hora est�ndar de Argentina
                Random Bytes: e552c47173be39282f0df2efbadfe69374804ea64d780577...
            Session ID Length: 0
            Cipher Suites Length: 32
            Cipher Suites (16 suites)
                Cipher Suite: TLS_RSA_WITH_RC4_128_MD5 (0x0004)
                Cipher Suite: TLS_RSA_WITH_RC4_128_SHA (0x0005)
                Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)
                Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033)
                Cipher Suite: TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x0032)
                Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)
                Cipher Suite: TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x0016)
                Cipher Suite: TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA (0x0013)
                Cipher Suite: TLS_RSA_WITH_DES_CBC_SHA (0x0009)
                Cipher Suite: TLS_DHE_RSA_WITH_DES_CBC_SHA (0x0015)
                Cipher Suite: TLS_DHE_DSS_WITH_DES_CBC_SHA (0x0012)
                Cipher Suite: TLS_RSA_EXPORT_WITH_RC4_40_MD5 (0x0003)
                Cipher Suite: TLS_RSA_EXPORT_WITH_DES40_CBC_SHA (0x0008)
                Cipher Suite: TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA (0x0014)
                Cipher Suite: TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA (0x0011)
                Cipher Suite: TLS_EMPTY_RENEGOTIATION_INFO_SCSV (0x00ff)
            Compression Methods Length: 1
            Compression Methods (1 method)
                Compression Method: null (0)

Frame 10: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0
Ethernet II, Src: xx:xx:xx:e4:de:4e, Dst: xx:xx:xx:14:a6:4a
Internet Protocol Version 4, Src: 173.37.145.8, Dst: 200.123.xxx.xxx
Transmission Control Protocol, Src Port: 443 (443), Dst Port: 43984 (43984), Seq: 1, Ack: 81, Len: 7
Secure Sockets Layer
    TLSv1.2 Record Layer: Alert (Level: Fatal, Description: Protocol Version)
        Content Type: Alert (21)
        Version: TLS 1.2 (0x0303)
        Length: 2
        Alert Message
            Level: Fatal (2)
            Description: Protocol Version (70)

The Cisco License Portal has changed the version of TLS?.

I followed this procedure without error, but the problem continues.

The CLM version is 3.2.6 running in a Debian 8.5 Jessie.

Note: others features works fine, for example: Manage --> Authorization Keys --> Right click over a PAK --> Download PAK Info.

I need to change the version of TLS? How to change it?.

Thanks.

[jmaires21]

Hi, 

Were you able to figure this out? We are having the exact same problem. 

regards, 

Juan

[mascapolla]

The check license portal still not working, but right now I can use the CLM normally (add devices and assign and transfer licenses).

[jmaires21]

thanks for the update

[Dawit Zeru]

Hi,

do find an answer?

[mascapolla]

Not yet. I'm waiting for the next version of CLM to verify if this problem is solved.

[Dawit Zeru]

thanks for answering.

do you know the ETA for CLM?

[mascapolla]

No, and I have no hope of publishing a new version, the last one is of december 2013 (three years ago!).