-
Bug
-
Resolution: Done
-
High
-
Honolulu Release
-
None
-
- Windriver SB-00
- ONAP Guilin deployment in Fujitsu local lab
Rest request to SB domain controller fails at SSL Handshake after importing domain controller self-assigned certificate in SNDC. This used to work in Frankfurt release. And it breaks MDONS use case.
The following are the log messages from SDNC pod:
----------------------------------------------------------------------------------------------------
2020-10-30T17:54:23.312Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter restapiUrl: [https://167.254.204.97:7443/cxf/tapi/v2/topologies?topology-id-or-name=otn
2020-10-30T17:54:23.313Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter restapiUser: [admin]
2020-10-30T17:54:23.314Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter restapiPassword: [**********]
2020-10-30T17:54:23.314Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter format: [json]
2020-10-30T17:54:23.315Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter httpMethod: [get]
2020-10-30T17:54:23.315Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter responsePrefix: [topologies]
2020-10-30T17:54:23.316Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter keyStoreFileName: [/opt/onap/sdnc/data/stores/sdnc.p12]
2020-10-30T17:54:23.316Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|INFO |RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Parameter keyStorePassword: [**********]
2020-10-30T17:54:23.583Z|c6b2656e-facd-494b-addf-f2e32bbd271c|355696298-140409|ERROR|RestapiCallNode |276 - .onap.ccsdk.sli.plugins.restapi-call-node-prov ider - 1.0.1|Error sending the request: Exception while posting http request to client javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provid er.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
org.onap.ccsdk.sli.core.sli.SvcLogicException: Exception while posting http request to client javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security .provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at org.onap.ccsdk.sli.plugins.restapicall.RestapiCallNode.sendHttpRequest(RestapiCallNode.java:854) ~[276:org.onap.ccsdk.sli.plugins.restapi-call-node-provider:1. 0.1]
at org.onap.ccsdk.sli.plugins.restapicall.RestapiCallNode.sendRequest(RestapiCallNode.java:500) [276:org.onap.ccsdk.sli.plugins.restapi-call-node-provider:1.0.1]
at org.onap.ccsdk.sli.plugins.restapicall.RestapiCallNode.sendRequest(RestapiCallNode.java:473) [276:org.onap.ccsdk.sli.plugins.restapi-call-node-provider:1.0.1]
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
at org.apache.aries.proxy.impl.ProxyHandler$1.invoke(ProxyHandler.java:54) [95:org.apache.aries.proxy:1.1.6]
at org.apache.aries.proxy.impl.ProxyHandler.invoke(ProxyHandler.java:119) [95:org.apache.aries.proxy:1.1.6]
at org.onap.ccsdk.sli.plugins.restapicall.$RestapiCallNode483272105.sendRequest(Unknown Source) [276:org.onap.ccsdk.sli.plugins.restapi-call-node-provider:1.0.1]
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:?]
at jdk.internal.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
Steps to reproduce:
1. From postman to register the external domain controller into ESR.