Question
Anthem
US
Last activity: 9 Aug 2018 2:19 EDT
Connect Rest test connectivity getting failed with SSLHandshakeExceptions.
Hi Team,
Connect Rest rule test connectivity getting failed with the below mentioned SSLHandshakeExceptions (com.pega.pegarules.pub.services.ConnectorException).
\** Caught unhandled exception: java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
Please find the attachment for the complete log.
Pegasystems Inc.
IN
Hi Pradeep,
The SSLHandshake Exceptions are seen as the required certificate is not present in the Service side which does not allow the handshake to happen.
Please import the server certificate and install it in your JDK's keystore in order to solve this issue.
Thanks,
Pegasystems Inc.
IN
Based on error "Validity check failed" it could be either Timestamp verification Or any certificate signature verification.
need to check the ssl log for more information, please follow below steps.
1. Add this JVM argument on server -Djavax.net.debug=all.
2. restart the server.
3. Run the rest connector and get the server log.
Pegasystems Inc.
IN
It seems ssl handshake is failing while client(Pega server) is verifying the service(Rest service provider) certificate chain against its trust store
It clearly seems that one of the certificate in the certificate chain is expired
See the final caused by in the stack trace:
Caused by: java.security.cert.CertificateExpiredException: NotAfter: Wed Aug 08 11:10:47 EDT 2018
Please check the certificates expiry date and if expired, update the certificate in the app server trust store