Uploaded image for project: 'Network Controller'
  1. Network Controller
  2. SDNC-142

aai-service adapter unable to find valid ssl trust certification

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Highest Highest
    • None
    • None
    • sdnc-oam
    • SDNC Sprint 5

      The path of ssl trust file for aai mentioned in

      sdnc/oam/installation/src/main/properties/aaiclient.properties is wrong

       

      org.onap.ccsdk.sli.adaptors.aai.ssl.trust=/opt/openecomp/sdnc/data/stores/truststore.openecomp.client.jks

       

      Correct path as per recently updated onap code should be

       

      org.onap.ccsdk.sli.adaptors.aai.ssl.trust=/opt/onap/sdnc/data/stores/truststore.openecomp.client.jks

       

      Wrong path results in below Error

       

      2017-10-24 09:56:31,703 | WARN  | ervice-operation | AAIService                       | 414 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT |
      javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
              at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)[:1.8.0_131]
              at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)[:1.8.0_131]
              at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)[:1.8.0_131]
              at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)[:1.8.0_131]
              at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1514)[:1.8.0_131]
              at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)[:1.8.0_131]
              at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1026)[:1.8.0_131]
              at sun.security.ssl.Handshaker.process_record(Handshaker.java:961)[:1.8.0_131]
              at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)[:1.8.0_131]
              at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)[:1.8.0_131]
              at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)[:1.8.0_131]
              at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)[:1.8.0_131]
              at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)[:1.8.0_131]
              at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)[:1.8.0_131]
              at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1546)[:1.8.0_131]
              at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)[:1.8.0_131]
              at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)[:1.8.0_131]
              at java.net.HttpURLConnection.getResponseMessage(HttpURLConnection.java:546)[:1.8.0_131]
              at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseMessage(HttpsURLConnectionImpl.java:382)[:1.8.0_131]
              at org.onap.ccsdk.sli.adaptors.aai.AAIService$AAIRequestExecutor.get(AAIService.java:2260)
              ... more
      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
              at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)[:1.8.0_131]
              at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)[:1.8.0_131]
              at sun.security.validator.Validator.validate(Validator.java:260)[:1.8.0_131]
              at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)[:1.8.0_131]
              at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)[:1.8.0_131]
              at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)[:1.8.0_131]
              at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)[:1.8.0_131]
              ... more
      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
              at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)[:1.8.0_131]
              at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)[:1.8.0_131]
              at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)[:1.8.0_131]
              at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392)[:1.8.0_131]
              ... more
      

       

            djtimoney Dan Timoney
            shalmonw shalmonw
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: