Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VCS Socket error

Getting these errors in the VCS Control log.  information has been changed to protect the innocent.

All ports are allowed between the Control and Express.

The TLS Zone between the two show as active.

What is the cause of this issue?

2014-09-30T14:24:43-07:00portforwarding: Level="ERROR" Detail="Client control socket open failed" forwarding="localhost:8191:localhost:8192" host="" id="31e6ca07-48e8-11e4-a492-0010f31ed774" retcode="255" err="ssh_x509store_cb: subject='C=US,...', error 20 at 0 depth lookup:unable to get local issuer certificate
ssh_verify_cert: verify error, code=20, msg='unable to get local issuer certificate'
key_verify failed for server_host_key
" UTCTime="2014-09-30 21:24:43,537"
2014-09-30T14:24:43-07:00ssh: Event="sshd" Module="openssh" Level="INFO" Detail="RSA+cert host key for IP address '' not in list of known hosts." UTCTime="2014-09-30 21:24:43"



  • Unified Communications Applications

What kind of zone is this?

What kind of zone is this? Traversal? Do you have TLS verify? Basically its complaining that the peer address that is configured is not present in the certificate that is being presented. I would change the peer address to be a FQDN and the subject verify name to be the same FQDN.

Please rate useful posts.
New Member

It is a Unified

It is a Unified Communications traversal between VCSC and VCSE.

I was using the host name instead of the cluster name in the zone.  I changed it, because I believe the cluster name is in the certificate.  But still getting the error.


New Member

hi John,  Is it fixed?

hi John,



Is it fixed?

New Member

Hey John, Did you ever get

Hey John, Did you ever get this resolved? Im seeing the same error.

This widget could not be displayed.