Windows Management Server: Win 10
Middleware Server                     : Ubuntu 22.04 LTS Server edition in VM
Database                                       : Oracle 19c on Windows
Â
Overview:
Explorative deployment to identify steps/procedures/issues of
Remote deployment of IFSCloud 22.1.4
Â
Issue:
Ifscloud remote-log-client Error when downloading logs in remote-log-client log file.
Autogenerated certs from ifscloud installer are installed into the
Trusted Root Certificate Authorities in both local machine as well as in java cacerts store.
Â
Steps:
.\main.ps1 -resource 'LOGGING'
Â
Below output in remote-log-client log file after a while.
======================================================
Error when downloading logs
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
               at org.elasticsearch.client.RestClient.extractAndWrapCause(RestClient.java:874) ~tremote-log-client.jar:?]
               at org.elasticsearch.client.RestClient.performRequest(RestClient.java:283) ~Âremote-log-client.jar:?]
               at org.elasticsearch.client.RestClient.performRequest(RestClient.java:270) ~                at org.elasticsearch.client.RestHighLevelClient.internalPerformRequest(RestHighLevelClient.java:1621) ~ remote-log-client.jar:?]                at org.elasticsearch.client.RestHighLevelClient.performRequest(RestHighLevelClient.java:1591) ~.remote-log-client.jar:?]                at org.elasticsearch.client.RestHighLevelClient.performRequestAndParseEntity(RestHighLevelClient.java:1561) ~tremote-log-client.jar:?]                at org.elasticsearch.client.RestHighLevelClient.search(RestHighLevelClient.java:1077) ~lremote-log-client.jar:?]                at com.ifsworld.logclient.remote.SearchUtil.searchLogs(SearchUtil.java:72) lremote-log-client.jar:?]                at com.ifsworld.logclient.remote.SearchUtil.getBulkLogsFromElasticSearch(SearchUtil.java:52) eremote-log-client.jar:?]                at com.ifsworld.logclient.remote.RemoteLogClient.main(RemoteLogClient.java:40) lremote-log-client.jar:?] Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target                at sun.security.ssl.Alert.createSSLException(Alert.java:128) ~n?:?]                at sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~c?:?]                at sun.security.ssl.TransportContext.fatal(TransportContext.java:264) ~t?:?]                at sun.security.ssl.TransportContext.fatal(TransportContext.java:259) ~s?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642) ~s?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461) ~9?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361) ~r?:?]                at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) ~r?:?]                at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) ~Â?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1065) ~)?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1052) ~>?:?]                at java.security.AccessController.doPrivileged(Native Method) ~e?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:999) ~$?:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.doRunTask(SSLIOSession.java:285) ~Sremote-log-client.jar:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:345) ~yremote-log-client.jar:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:523) ~sremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120) ~nremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162) ~aremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337) ~Iremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315) ~iremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276) ~.remote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104) ~hremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591) ~tremote-log-client.jar:?]                at java.lang.Thread.run(Thread.java:834) ~o?:?] Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target                at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:385) ~t?:?]                at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290) ~o?:?]                at sun.security.validator.Validator.validate(Validator.java:264) ~Â?:?]                at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321) ~.?:?]                at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:279) ~ ?:?]                at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:141) ~X?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:620) ~d?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461) ~6?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361) ~ ?:?]                at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) ~u?:?]                at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) ~5?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1065) ~e?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1052) ~ ?:?]                at java.security.AccessController.doPrivileged(Native Method) ~f?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:999) ~f?:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.doRunTask(SSLIOSession.java:285) ~ remote-log-client.jar:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:345) ~sremote-log-client.jar:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:523) ~eremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120) ~dremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162) ~rremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337) ~ remote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315) ~.remote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276) ~gremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104) ~aremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591) ~2remote-log-client.jar:?]                at java.lang.Thread.run(Thread.java:834) ~l?:?] Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target                at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) ~ ?:?]                at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) ~5?:?]                at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~t?:?]                at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:380) ~Â?:?]                at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:290) ~o?:?]                at sun.security.validator.Validator.validate(Validator.java:264) ~.?:?]                at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:321) ~                at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:279) ~o?:?]                at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:141) ~ ?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:620) ~Â?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461) ~Â?:?]                at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361) ~Â?:?]                at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) ~ ?:?]                at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444) ~a?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1065) ~                at sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1052) ~:?:?]                at java.security.AccessController.doPrivileged(Native Method) ~t?:?]                at sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:999) ~u?:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.doRunTask(SSLIOSession.java:285) ~tremote-log-client.jar:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:345) ~Âremote-log-client.jar:?]                at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:523) ~>remote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:120) ~Âremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:162) ~Âremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:337) ~Sremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:315) ~eremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:276) ~lremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:104) ~Eremote-log-client.jar:?]                at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:591) ~tremote-log-client.jar:?]                at java.lang.Thread.run(Thread.java:834) ~i?:?]