com.netflix.zuul.exception.ZuulException: Reporting Module is not loading in SSL enabled DevTest Portal

Products

• CA Application Test
• Service Virtualization

Issue/Introduction

Reporting Module is not loading in DevTest portal. The page is keep on trying to load. We are seeing the below error in the portal-grails log.

Configured 1505 webserver over SSL using their internal CA provided certs. Since then, jasper reports were not loading

com.netflix.zuul.exception.ZuulException: Forwarding error
    at org.springframework.cloud.netflix.zuul.filters.route.SimpleHostRoutingFilter.handleException(SimpleHostRoutingFilter.java:261) ~[spring-cloud-netflix-zuul-2.2.10.RELEASE.jar:2.2.10.RELEASE]
    at org.springframework.cloud.netflix.zuul.filters.route.SimpleHostRoutingFilter.run(SimpleHostRoutingFilter.java:241) ~[spring-cloud-netflix-zuul-2.2.10.RELEASE.jar:2.2.10.RELEASE]
    at com.netflix.zuul.ZuulFilter.runFilter(ZuulFilter.java:117) ~[zuul-core-1.3.1.jar:1.3.1]
    at com.netflix.zuul.FilterProcessor.processZuulFilter(FilterProcessor.java:193) ~[zuul-core-1.3.1.jar:1.3.1]
    at com.netflix.zuul.FilterProcessor.runFilters(FilterProcessor.java:157) ~[zuul-core-1.3.1.jar:1.3.1]
    at com.netflix.zuul.FilterProcessor.route(FilterProcessor.java:118) ~[zuul-core-1.3.1.jar:1.3.1]
    at com.netflix.zuul.ZuulRunner.route(ZuulRunner.java:96) ~[zuul-core-1.3.1.jar:1.3.1]
    at com.netflix.zuul.http.ZuulServlet.route(ZuulServlet.java:116) ~[zuul-core-1.3.1.jar:1.3.1]
    at com.netflix.zuul.http.ZuulServlet.service(ZuulServlet.java:81) ~[zuul-core-1.3.1.jar:1.3.1]
    at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:799) ~[jetty-all-9.4.50.v20221201-uber-patched.jar:9.4.50.v20221201]

Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.ssl.Alert.createSSLException(Alert.java:131) ~[?:1.8.0_352]
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:324) ~[?:1.8.0_352]
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:267) ~[?:1.8.0_352]
    at sun.security.ssl.TransportContext.fatal(TransportContext.java:262) ~[?:1.8.0_352]

Environment

Release : All supported DevTest versions

Component : CA Application Test

Cause

The new jetty upgraded version in 10.7.2, truststore is mandated with Portal to get the reports from Jasper server.

 

Resolution

Add the below property to phoenix.properties file to implicitly trust the CA Certs.

By default this property is set to false. Setting this property to TRUE solves the problem. 

phoenix.zuul.jasper.skipSSLTrustValidation=true

 

Also verify registry.host = <FQDN> hostname   in pheonix.properties

The hostname should match  the subject alternative names specified in Certificate