Question
CGI
IN
Last activity: 11 Aug 2023 8:19 EDT
signature verification failed for hotfix
As part of hazelcast vulnerability, I get Signature verification failed for *hotfix name* error when I tried to install the hotfix provided by pega,I added below DSS to resolve it, is this the right approach to resolve it?
hotfixmanager/enableRevocation DSS to false
Pegasystems Inc.
US
@Subin Jerald You could try this (if you haven't already) Verifying hotfix authenticity by using a Pega Keystore
CGI
IN
Hi @PhilipShannon -Thanks for the reply! I have attached the error which I received when I tried to create the keystore.
Self
IN
@PhilipShannon I have depoyed the dificert in trust store still hotfix validation failing
LTIMindtree
SA
You can use that method for the time being and not on the long run. As per Post from Shanp, You'll need to follow the Authenticity of Keystore and Truststore certificates.
LTIMindtree
SA
Pega has recently provided a solution to fix the Signature verification issue while installing the hotfix.
You can follow the below link to fix the issue permanently.
How to Install DigiCert Root G4 Certificate in Kubernetes Environment | Support Center (pega.com)
CGI
IN
@Kishore Sanagapalli Thanks a lot!