cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
745
Views
0
Helpful
2
Replies

JTAPI library: Certificate update failed, reason =9

pavel.micka
Level 1
Level 1

Hi,

we are using JTAPI library version 9.1.1 and we are trying to update certificate. But we get a rather cryptic exception with reason=9.

We found out that the problem starts with java version 1.7.80 (whole 1.7.79) is ok.

So our questions are following:

  • What exactly does reason= 9 mean. (is there any listing of these numbers?)
  • Is there anything we can do to overcome this issue (restriction: we do not want to use such old Java...)

Thanks in advance!

Pavel

103: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.CAPFEventHandler@6bd38b87.endSessionEv: received event [ sessionId=223,reason=9,reasonInfo=null ]

104: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9.installCertificate : CAPFEventCondtionWait  Notified

105: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9.installCertificate : CAPFEventCondtion reset

106: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG: JTAPIProperties.updateCertificate  certStatus =false reason=9

107: Nov 28 23:37:03.577 PST %CAPF-3-ERR:JTAPIProperties.updateServerCert: throwing exception : Certificate update failed, reason= 9

108: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9.sessionEnded : Session ended

109: Nov 28 23:37:03.577 PST %CAPF-3-ERR:updateCertificate: caught exception java.lang.Exception:  JTAPIProperties.updateCertificate : Certificate update failed, reason= 9

110: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9.sessionEnded : CAPFEventHandlerThread shuting down receive thread

111: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9 CAPFReceiveThread.shutdown : shutting down

112: Nov 28 23:37:03.577 PST %CAPF-3-ERR:CAPFMessage.read : caught exception java.net.SocketException: Socket closed

113: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9 CAPFReceiveThread.shutdown : shutting down inputstream closed.

114: Nov 28 23:37:03.577 PST %CAPF-3-ERR:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9 CAPFReceiveThread.run : stream closed

115: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9 CAPFReceiveThread.shutdown : waiting for exit

116: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9 CAPFReceiveThread.run: exiting

117: Nov 28 23:37:03.577 PST %CAPF-DBG-7-DBG:com.cisco.services.CAPFClient.client.implementation.CAPFClientMgrImpl@2929e5e9 CAPFReceiveThread.notifyHanlderOfDemise : notifying handler of demise

118: Nov 28 23:37:03.577 PST %CAPF-3-ERR:com.cisco.services.CAPFClient.client.CAPFTraceModule@2e864e43 caught java.lang.Exception:  JTAPIProperties.updateCertificate : Certificate update failed, reason= 9

java.lang.Exception:  JTAPIProperties.updateCertificate : Certificate update failed, reason= 9

at com.cisco.jtapi.JTAPIProperties.updateCertificate(CTQF)

at com.cisco.jtapi.JTAPIProperties.setSecurityPropertyForInstance(CTQF)

at com.cisco.services.jtprefs.jtprefsFrame.getProviderOpenRequestTimeout(CTQF)

at com.cisco.services.jtprefs.jtprefsFrame.getSyslogCollectorUDPPort(CTQF)

at com.cisco.services.jtprefs.jtprefsFrame.getAlarmServiceHostname(CTQF)

at com.cisco.services.jtprefs.jtprefsFrame.C(CTQF)

at com.cisco.services.jtprefs.jtprefsFrame$28.mouseReleased(CTQF)

at java.awt.AWTEventMulticaster.mouseReleased(Unknown Source)

at java.awt.Component.processMouseEvent(Unknown Source)

at javax.swing.JComponent.processMouseEvent(Unknown Source)

at java.awt.Component.processEvent(Unknown Source)

at java.awt.Container.processEvent(Unknown Source)

at java.awt.Component.dispatchEventImpl(Unknown Source)

at java.awt.Container.dispatchEventImpl(Unknown Source)

at java.awt.Component.dispatchEvent(Unknown Source)

at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)

at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)

at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)

at java.awt.Container.dispatchEventImpl(Unknown Source)

at java.awt.Window.dispatchEventImpl(Unknown Source)

at java.awt.Component.dispatchEvent(Unknown Source)

at java.awt.EventQueue.dispatchEvent(Unknown Source)

at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)

at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)

at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)

at java.awt.EventDispatchThread.pumpEvents(Unknown Source)

at java.awt.EventDispatchThread.pumpEvents(Unknown Source)

at java.awt.EventDispatchThread.run(Unknown Source)

2 Replies 2

npetrele
Cisco Employee
Cisco Employee

I don't know what reason=9 means (reason 9 from outer space?), but I do have questions. 

1. Are you trying to update the certificate using JTAPI preferences? 

2. If so, did you try deleting the certificate first? 

3. Did you run JTAPI preferences as administrator (Windows) or as a user with the correct permissions (Linux)? 

Hi.

1. Yes (meant programatically via com.cisco.jtapi.JTAPIProperties API)

2. No, but the problem occurs also when is first download cert request sent (when there is no local keystore - nothing for delete). After deeper investigation we found that the CTLFile.tlv.sgn and JtapiServerKeyStore*** are downloaded/created and the server keystore contains certificates. This first download is via plain TFTP. Then client certificate should be downloaded securely. We can see connection is established and TLS handshaking is OK but then the download get stuck. Process finishes after 90sec timeout with reason 9 and no JtapiClientKeyStore*** is created.

3. Yes

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: