cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1029
Views
0
Helpful
0
Comments
cdnadmin
Level 11
Level 11
This document was generated from CDN thread

Created by: Hemal Mehta on 10-06-2011 09:21:13 AM
Hello,
       I am trying to connect to a https internal site and I added a .cer to the trusted keystore. It went through fine, however I keep getting the exception:
 
faultSubcode:
 faultString: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 faultActor:
 faultNode:
 faultDetail:
                {http://xml.apache.org/axis/}stackTrace: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 
From what I researched it measn that the system cannot find the valid certificate. I added the .cer to the cacerts keystore under:
 
C:\Cisco\CVP\jre\lib\security
 
I also added under :
 
C:\Cisco\CVP\jre1.6\lib\security
as I saw 2 jre.
Has anyone experienced this issue. Do we need to modify any tomcat config files?
I restarted tomcat and the server also.
Hemal
 

Subject: RE: SSL issues with CVP 8.0/Tomcat
Replied by: Feroz Syed on 14-07-2011 05:48:55 AM
Hi Hemal,
 
I did install SSL certificate on CVP7.0 without any issue and I believe it should be same on 8.0 as well. Can you make sure, you've valid certificate and the same has been added to trusted key store without any issue. I have followed  below steps for adding certifiacte to key store.
 
1.Open the command prompt  and go to the ¿C:\Cisco\CVP\jre\bin¿ directory.
2.Use keytool java command to import the certificate.
C:\Cisco\CVP\jre\bin > keytool -import -trustcacerts -alias <alias name for certificate> -file "<path><certificate name>.cer" -keystore "C:/Cisco/CVP/jre/lib/security/cacerts"
This will ask you to enter keystore password ,enter default password ¿changeit¿ and enter, this step will add certificate into ¿cacerts¿ file of the java security environment.
3. When prompted to enter password. Enter ¿changeit¿
4. When prompted Trust this certificate? : enter yes
5. Please verify that ¿cacerts¿ file has been modified. [At location :- C:/Cisco/CVP/jre/lib/security/" ]
6. Re-start VXMLServer. Tomcat restart not required.
 
Hope this helps!
 
Regards,
Feroz Syed
 

Subject: RE: SSL issues with CVP 8.0/Tomcat
Replied by: Feroz Syed on 14-07-2011 05:50:40 AM
Hi Hemal,
 
I did install SSL certificate on CVP7.0 without any issue and I believe it should be same on 8.0 as well. Can you make sure, you've valid certificate and the same has been added to trusted key store without any issue. I have followed  below steps for adding certifiacte to key store.
 
1.Open the command prompt  and go to the ¿C:\Cisco\CVP\jre\bin¿ directory.
2.Use keytool java command to import the certificate.
C:\Cisco\CVP\jre\bin > keytool -import -trustcacerts -alias <alias name for certificate> -file "<path><certificate name>.cer" -keystore "C:/Cisco/CVP/jre/lib/security/cacerts"
This will ask you to enter keystore password ,enter default password ¿changeit¿ and enter, this step will add certificate into ¿cacerts¿ file of the java security environment.
3. When prompted to enter password. Enter ¿changeit¿
4. When prompted Trust this certificate? : enter yes
5. Please verify that ¿cacerts¿ file has been modified. [At location :- C:/Cisco/CVP/jre/lib/security/" ]
6. Re-start VXMLServer. Tomcat restart not required.
 
Hope this helps!
 
Regards,
Feroz Syed
 

Subject: RE: New Message from Feroz Syed in Customer Voice Portal (CVP) - CVP - All
Replied by: Hemal Mehta on 14-07-2011 09:30:35 AM
Yes,  this is resolved long back.  Found that there was some issue with the certificate itself.  Got the right one and  it worked just fine.
Thanks,
Hemal

From: Cisco Developer Community Forums [mailto:cdicuser@developer.cisco.com]
Sent: Thursday, July 14, 2011 4:51 AM
To: cdicuser@developer.cisco.com
Subject: New Message from Feroz Syed in Customer Voice Portal (CVP) - CVP - All Versions: RE: SSL issues with CVP 8.0/Tomcat

Feroz Syed has created a new message in the forum "CVP - All Versions":

--------------------------------------------------------------
Hi Hemal,

I did install SSL certificate on CVP7.0 without any issue and I believe it should be same on 8.0 as well. Can you make sure, you've valid certificate and the same has been added to trusted key store without any issue. I have followed  below steps for adding certifiacte to key store.

1.Open the command prompt  and go to the ¿C:\Cisco\CVP\jre\bin¿ directory.
2.Use keytool java command to import the certificate.
C:\Cisco\CVP\jre\bin > keytool -import -trustcacerts -alias <alias name for certificate> -file "<path><certificate name>.cer" -keystore "C:/Cisco/CVP/jre/lib/security/cacerts"
This will ask you to enter keystore password ,enter default password ¿changeit¿ and enter, this step will add certificate into ¿cacerts¿ file of the java security environment.
3. When prompted to enter password. Enter ¿changeit¿
4. When prompted Trust this certificate? : enter yes
5. Please verify that ¿cacerts¿ file has been modified. [At location :- C:/Cisco/CVP/jre/lib/security/" ]
6. Re-start VXMLServer. Tomcat restart not required.

Hope this helps!

Regards,
Feroz Syed

--
To respond to this post, please click the following link:

<http://developer.cisco.com/web/cvp/forums/-/message_boards/view_message/4226818>

or simply reply to this email.

Subject: RE: SSL issues with CVP 8.0/Tomcat
Replied by: indumathiIVR (simulated) on 20-07-2011 06:55:21 AM
Hi,

Have you got the solution?

Have you tried setting the system properties for  "truststore" and "trustStorePassword"?



Regards,

Indumathi

Subject: RE: New Message from indumathiIVR (simulated) in Customer Voice Portal (CVP
Replied by: Hemal Mehta on 20-07-2011 08:13:49 AM
Yes, as I replied earlier, irt worked fine. There was a issue with the certificate itself. Got the right cert and it worked fine.


From: Cisco Developer Community Forums [mailto:cdicuser@developer.cisco.com]
Sent: Wednesday, July 20, 2011 5:55 AM
To: cdicuser@developer.cisco.com
Subject: New Message from indumathiIVR (simulated) in Customer Voice Portal (CVP) - CVP - All Versions: RE: SSL issues with CVP 8.0/Tomcat

indumathiIVR (simulated) has created a new message in the forum "CVP - All Versions":

--------------------------------------------------------------
Hi,

Have you got the solution?

Have you tried setting the system properties for "truststore" and "trustStorePassword"?



Regards,

Indumathi
--
To respond to this post, please click the following link:

<http://developer.cisco.com/web/cvp/forums/-/message_boards/view_message/4248230>

or simply reply to this email.

Subject: RE: New Message from indumathiIVR (simulated) in Customer Voice Portal (CVP
Replied by: Manoj Anantha on 26-04-2012 06:25:56 AM
Hi,
 
I have similar issue, but couldnt find solution yet.
 
Im using CVP 8.5. Created a VXML application that use call studio built in Web Service element. When we use http it works fine. However, when we use https, I get an error.
element,error,The error was: HTTP transport error: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
 
How do I import the certificate to vxml server. Please help me provide step by step procdure.
 
Thank you,
Manoj Anantha
 
 
Yes, as I replied earlier, irt worked fine. There was a issue with the certificate itself. Got the right cert and it worked fine.


From: Cisco Developer Community Forums [mailto:cdicuser@developer.cisco.com]
Sent: Wednesday, July 20, 2011 5:55 AM
To: cdicuser@developer.cisco.com
Subject: New Message from indumathiIVR (simulated) in Customer Voice Portal (CVP) - CVP - All Versions: RE: SSL issues with CVP 8.0/Tomcat

indumathiIVR (simulated) has created a new message in the forum "CVP - All Versions":

--------------------------------------------------------------
Hi,

Have you got the solution?

Have you tried setting the system properties for "truststore" and "trustStorePassword"?



Regards,

Indumathi
--
To respond to this post, please click the following link:

<http://developer.cisco.com/web/cvp/forums/-/message_boards/view_message/4248230>

or simply reply to this email.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Quick Links