DX Spectrum OneClick Webapp is not working after upgrade

Products

• Spectrum
• Network Observability

Issue/Introduction

After a Spectrum upgrade, the Webapp stopped working with the following error observed in the log:

SwingProcessImpl.java:372) [oneclickwebapp_anonym_fad1d200e1a8_1626138595995] ERROR: Failed to connect websocket to server [wss://<HOSTNAME>:8080/spectrum/oneclickwebapp/async/app-bin?instanceId=oneclickwebapp_anonym_1626138595995&sessionPoolId=default-pool&reconnect=false]! -> [Ljava.lang.Object;@ba8d91c | 
2021-07-13 11:09:57,905 INFO  [Webswing Process Handler] (SwingProcessImpl.java:372) [oneclickwebapp_anonym__1626138595995] ERROR: Exiting application because it could not connect to server -> jakarta.websocket.DeploymentException: Connection failed.

Environment

DX NetOps Spectrum all currently supported releases

Cause

This is caused by a SSLHandshakeException.

In the above instance, checking the keystoreFile field in the server.xml file of both Tomcat and webTomcat shows they are the same but the truststore path in webswing.properties had the wrong certificate path and wrong password. So, the custom certificates are not matching.

The keystoreFile attribute specifies the path to the Java KeyStore (JKS) file that contains:

1. Your server's SSL/TLS certificate (the certificate issued by your Certificate Authority for the OneClick web server's hostname).
2. The corresponding private key for that certificate.
3. Any necessary intermediate certificates from your Certificate Authority.
4. The root Certificate Authority (CA) certificate that signed your intermediate certificates.

Resolution

1. Change the certificate path and password in the webswing.properties file to be the same as in the $SPECROOT/tomcat/conf/server.xml file.
   
   File location for webswing.properties is:
   
   $SPECROOT/webtomcat/webswing/webswing.properties

2. Restart the webTomcat process.

Additional Information

TechDocs : DX NetOps Spectrum 24.3 : Configure HTTPS for the OneClick WebApp