ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

VIP EG | Unable to Bind User when testing the User Store Settings with SSL Enabled

book

Article ID: 172313

calendar_today

Updated On:

Products

VIP Enterprise Gateway

Issue/Introduction

'Test User' on User Store Config page fails when SSL is enabled.

VIP EG Console logs shows:

ERROR "2014-01-22 13:23:53.620 GMT-0500" 155.252.121.1 vipegconsole e0cb2553fc8e064e30 18476 "actor=symadmin,text=Could not bind to the directory server.

VsException [error=18476] [javax.naming.CommunicationException: simple bind failed: demo.org:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed]]

 

Cause

Host name: demo.org has two sub-domains (as follows) which has certificates issued from different Issuers.

Org1.demo.org

Org2.demo.org

 

Resolution

Requested customer to import the Issuing CA for both of the DC into the VIP EG Config Console, and restart the service. This resolved the issue.