Salome_Prangl-Groetzl_759

How to connect to an URL that reqires a certificate.

Discussion created by Salome_Prangl-Groetzl_759 on Apr 26, 2017

Symptoms

If you try to create a new adapter for a RA solution (e.g. Webservices, VmWare, ..) that requires a certificate, you get the following error message:

 Error Messge: Com.uc4.be.gui.remote.CITGuiException: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

 

 

 


 

 

Cause

 

There is no certificate for the website you want to connect to.


 

 

Resolution

Solution

 

Go to the https webpage and copy the certificate in Internet Explorer as shown below

 

Go to the https webpage

 

Rightclick on a blank field on the webpage and choose "Properties"

 

Click on button "Certificates"

 

Change to tab "Details"

 

Click on button "Copy to file"

 

A Window "Welcome to the Certificate Export Wizard" appears

 

Click on button "Next"

 

Choose Format "DER encoded binary X.509 (.CER)"

 

Click on button "Next"

 

Choose Filename and Dowload location

 

Click on button "Next"

 

Click on button "Finish"

 

 

 

 

 

The next step is to find out which java version is used .

 

My agent is started via the Service Manager Dialog and uses the java listed below:

 

C:\Program Files\Java\jdk1.8.0_16\bin\

 

Now search for a file named "cacerts" in the java directory that runs this agent.

 

It's found in the following directory:

 

C:\Program Files\Java\jdk1.8.0_16\jre\lib\security

 

Run the following command on the command line to import the certificate:

 

keytool -importcert -file c:\Companyj.cer -keystore cacerts

 

You have to create a password (You can use 'changeit' as keystore password (that's some kind of default password)).

 

Trust this certificate?: yes

 

Certificate was added to keystore

 

The import is done and the agent can connect to the URL specified in the RA agent .

 

If you're interested in a more detailed description:

 

http://java.sun.com/javase/6/docs/technotes/tools/solaris/keytool.html

 

 

 

Notes

 

It's necessary to have all certificates installed for all webservice / VM environments you want to connect to

Outcomes