AnsweredAssumed Answered

SSL certificate update on my webserver, failed handshake.with alfresco

Question asked by rajaram.mummadavarapu on Mar 10, 2016
Latest reply on Mar 11, 2016 by rajaram.mummadavarapu
Hello,
I've recently updated my webserver's SSL certificate and after that, I've restarted my tomcat and alfresco instance on my AppServer; cleared my browser cache and saw the new certificate.
Now, When I try to do some functionality which requires connection with alfresco, on my website, I'm getting these errors:
1. Application Log:
10 Mar 2016 10:32:22 - ERROR ajp-bio-9003-exec-1 com.wellsfargo.hmap.util.CMSUtil - [Thread Id :: 33][httpPost()]-6220_Some error in http Post method
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
   at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1916)
   at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:279)
   at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:273)
   at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1472)
   at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:213)
   at sun.security.ssl.Handshaker.processLoop(Handshaker.java:913)
   at sun.security.ssl.Handshaker.process_record(Handshaker.java:849)
   at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1035)
   at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1344)
   at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1371)
   at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1355)
   at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
   at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
   at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1093)
   at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)
   at com.wellsfargo.hmap.util.CMSUtil.httpPost(CMSUtil.java:1301)
   at com.wellsfargo.hmap.util.CMSUtil.createDocumentText(CMSUtil.java:730)
   at com.wellsfargo.hmap.serviceimpl.messaging.ComponentGroupServiceImpl.createComponentGroup(ComponentGroupServiceImpl.java:62)
   at com.wellsfargo.hmap.integration.sessionfacade.messaging.ComponentGroupSessionFacade.saveComponentGroup(ComponentGroupSessionFacade.java:413)
   at com.wellsfargo.hmap.integration.businessdelegateimpl.messaging.ComponentGroupDelegateImpl.saveComponentGroup(ComponentGroupDelegateImpl.java:402)
   at com.wellsfargo.hmap.presentation.action.messaging.ComponentGroupAction.createComponentGroup(ComponentGroupAction.java:475)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
   at java.lang.reflect.Method.invoke(Method.java:606)
   at com.opensymphony.xwork2.DefaultActionInvocation.invokeAction(DefaultActionInvocation.java:450)
   at com.opensymphony.xwork2.DefaultActionInvocation.invokeActionOnly(DefaultActionInvocation.java:289)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:252)
   at org.apache.struts2.interceptor.debugging.DebuggingInterceptor.intercept(DebuggingInterceptor.java:256)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptor.doIntercept(DefaultWorkflowInterceptor.java:167)
   at com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.intercept(MethodFilterInterceptor.java:98)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.validator.ValidationInterceptor.doIntercept(ValidationInterceptor.java:265)
   at org.apache.struts2.interceptor.validation.AnnotationValidationInterceptor.doIntercept(AnnotationValidationInterceptor.java:68)
   at com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.intercept(MethodFilterInterceptor.java:98)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ConversionErrorInterceptor.intercept(ConversionErrorInterceptor.java:138)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ParametersInterceptor.doIntercept(ParametersInterceptor.java:239)
   at com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.intercept(MethodFilterInterceptor.java:98)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ParametersInterceptor.doIntercept(ParametersInterceptor.java:239)
   at com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.intercept(MethodFilterInterceptor.java:98)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.StaticParametersInterceptor.intercept(StaticParametersInterceptor.java:191)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at org.apache.struts2.interceptor.MultiselectInterceptor.intercept(MultiselectInterceptor.java:73)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at org.apache.struts2.interceptor.CheckboxInterceptor.intercept(CheckboxInterceptor.java:91)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at org.apache.struts2.interceptor.FileUploadInterceptor.intercept(FileUploadInterceptor.java:252)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ModelDrivenInterceptor.intercept(ModelDrivenInterceptor.java:100)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ScopedModelDrivenInterceptor.intercept(ScopedModelDrivenInterceptor.java:141)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ChainingInterceptor.intercept(ChainingInterceptor.java:145)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.PrepareInterceptor.doIntercept(PrepareInterceptor.java:171)
   at com.opensymphony.xwork2.interceptor.MethodFilterInterceptor.intercept(MethodFilterInterceptor.java:98)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.I18nInterceptor.intercept(I18nInterceptor.java:161)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at org.apache.struts2.interceptor.ServletConfigInterceptor.intercept(ServletConfigInterceptor.java:164)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.AliasInterceptor.intercept(AliasInterceptor.java:193)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptor.intercept(ExceptionMappingInterceptor.java:189)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at com.wellsfargo.hmap.common.interceptor.LoginInterceptor.intercept(LoginInterceptor.java:112)
   at com.opensymphony.xwork2.DefaultActionInvocation.invoke(DefaultActionInvocation.java:246)
   at org.apache.struts2.impl.StrutsActionProxy.execute(StrutsActionProxy.java:54)
   at org.apache.struts2.dispatcher.Dispatcher.serviceAction(Dispatcher.java:563)
   at org.apache.struts2.dispatcher.ng.ExecuteOperations.executeAction(ExecuteOperations.java:77)
   at org.apache.struts2.dispatcher.ng.filter.StrutsPrepareAndExecuteFilter.doFilter(StrutsPrepareAndExecuteFilter.java:99)
   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
   at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505)
   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170)
   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:423)
   at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190)
   at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:625)
   at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:316)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
   at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
   at java.lang.Thread.run(Thread.java:745)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385)
   at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
   at sun.security.validator.Validator.validate(Validator.java:260)
   at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:326)
   at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:231)
   at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:126)
   at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1454)
   … 88 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
   at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:196)
   at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:268)
   at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380)
   … 94 more


2. Solr.log:
2016-03-10 10:32:45,071 ERROR [org.alfresco.solr.tracker.CoreTracker] Tracking failed
org.alfresco.error.AlfrescoRuntimeException: 02100021 GetModelsDiff return status is 401
   at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1059)
   at org.alfresco.solr.tracker.CoreTracker.trackModelsImpl(CoreTracker.java:1962)
   at org.alfresco.solr.tracker.CoreTracker.trackModels(CoreTracker.java:4751)
   at org.alfresco.solr.tracker.CoreTracker.trackRepository(CoreTracker.java:1287)
   at org.alfresco.solr.tracker.CoreTracker.updateIndex(CoreTracker.java:573)
   at org.alfresco.solr.tracker.CoreTrackerJob.execute(CoreTrackerJob.java:45)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)
2016-03-10 10:32:45,072 ERROR [org.alfresco.solr.tracker.CoreTracker] Tracking failed
org.alfresco.error.AlfrescoRuntimeException: 02100022 GetModelsDiff return status is 401
   at org.alfresco.solr.client.SOLRAPIClient.getModelsDiff(SOLRAPIClient.java:1059)
   at org.alfresco.solr.tracker.CoreTracker.trackModelsImpl(CoreTracker.java:1962)
   at org.alfresco.solr.tracker.CoreTracker.trackModels(CoreTracker.java:4751)
   at org.alfresco.solr.tracker.CoreTracker.trackRepository(CoreTracker.java:1287)
   at org.alfresco.solr.tracker.CoreTracker.updateIndex(CoreTracker.java:573)
   at org.alfresco.solr.tracker.CoreTrackerJob.execute(CoreTrackerJob.java:45)
   at org.quartz.core.JobRunShell.run(JobRunShell.java:216)
   at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:563)

3. alfresco.log:
2016-03-10 10:07:32,187 ERROR [org.alfresco.fileserver] [FileStateReaper] Error from JLAN
java.lang.IllegalStateException: Hazelcast Instance is not active!
   at com.hazelcast.impl.FactoryImpl.initialChecks(FactoryImpl.java:711)
   at com.hazelcast.impl.MProxyImpl.beforeCall(MProxyImpl.java:102)
   at com.hazelcast.impl.MProxyImpl.access$000(MProxyImpl.java:49)
   at com.hazelcast.impl.MProxyImpl$DynamicInvoker.invoke(MProxyImpl.java:64)
   at com.sun.proxy.$Proxy273.localKeySet(Unknown Source)
   at com.hazelcast.impl.MProxyImpl.localKeySet(MProxyImpl.java:340)
   at org.alfresco.jlan.server.filesys.cache.hazelcast.HazelCastClusterFileStateCache.removeExpiredFileStates(HazelCastClusterFileStateCache.java:771)
   at org.alfresco.jlan.server.filesys.cache.FileStateReaper.run(FileStateReaper.java:198)
   at java.lang.Thread.run(Thread.java:724)
2016-03-10 10:07:39,323 WARN  [org.springframework.beans.factory.support.DisposableBeanAdapter] [localhost-startStop-2] Invocation of destroy method failed on bean with name 'jodconverter.shared.instance': org.artofsolving.jodconverter.office.OfficeException: failed to start and connect


Do we need to do/upgrade/update anything on alfresco side, in order to work with the new SSL certificate?
It happened same with DEV, SIT and UAT.

alfresco-4.2.4 is my version.


Please assist.
Thanks in advance.

Outcomes