Author Message
muthukumarganesamurthy2
Joined: Jul 12, 2016
Messages: 4
Offline
Hi,

I need the procedure/steps/assistance on Installing the new DigiCert issued certificates provided by Salesforce on IVR application server running on Tomcat to re-establish the connectivity between IVR<>Salesforce.

As of now I am seeing the below error:

Log snippet:

[VMWARE]|[16 Jan 2018 03:43:08,200]|[DEBUG]|[CLASS: WS_SALESFORCE.getQuerySR(829)]|[MESSAGE: Invocation of querysr took 20174ms]
[VMWARE]|[16 Jan 2018 03:43:09,081]|[INFO]|[CLASS: WS_SALESFORCE.loginSalesforce(400)]|[MESSAGE: Login salesforce using: user:ivradmin@vmware.com.vmw.qa2 pass:VMWare@123 token:o7zsZOYiSHyjniZyNBNNhdWZ id thread:45]
[VMWARE]|[16 Jan 2018 03:43:09,238]|[ERROR]|[CLASS: WS_SALESFORCE.loginSalesforce(415)]|[MESSAGE: error login salesforce: ]
AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
faultActor:
faultNode:
faultDetail:
{http://xml.apache.org/axis/}stackTrace:javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
at sun.security.ssl.Handshaker.processLoop(Unknown Source)
at sun.security.ssl.Handshaker.process_record(Unknown Source)
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:186)
at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:191)
at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:404)
at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
at org.apache.axis.client.Call.invoke(Call.java:2767)
at org.apache.axis.client.Call.invoke(Call.java:2443)
at org.apache.axis.client.Call.invoke(Call.java:2366)
at org.apache.axis.client.Call.invoke(Call.java:1812)
at com.avaya.aps.sca.vmware.dao.ws.salesforce.SoapBindingStub.login(SoapBindingStub.java:3246)
at com.avaya.aps.sca.vmware.dao.ws.SalesforceImpl.loginSalesforce(SalesforceImpl.java:406)
at com.avaya.aps.sca.vmware.dao.ws.SalesforceImpl.connectAll(SalesforceImpl.java:469)
at com.avaya.aps.sca.vmware.dao.ws.SalesforceImpl.access$000(SalesforceImpl.java:45)
at com.avaya.aps.sca.vmware.dao.ws.SalesforceImpl$1.run(SalesforceImpl.java:294)
at java.lang.Thread.run(Unknown Source)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
at sun.security.validator.Validator.validate(Unknown Source)
at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)


Regards
Muthu


IvanFontalvo
Joined: Mar 22, 2012
Messages: 61
Offline
Hi, you just need to add the new certificate via runtimeconfig app deployed on tomcat. go to Manager apps-> runtimeconfig -> login -> certificates -> and add the new cert.

you should remove the old cert too.

best Regards
RossYakulis
Joined: Nov 6, 2013
Messages: 2652
Offline
yep.
Go to:   
Mobile view