SSLSocketFactory exception from Risk Authentication REST API

Products

• CA Risk Authentication
• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)
• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)

Issue/Introduction

Hi,

we enabled the REST-based API as per this link 

REST-based API (broadcom.com)

the service are calling is 

IP Range API (broadcom.com)

error message from restapi.log -

022-02-16 11:39:15,382 [WebContainer : 0] INFO  risk.services.IPRangeService(63) [] -> {dt.trace_id=05bf259d42a9e356e4f637cd372e7241, dt.span_id=c59ebc31ffc8247a} Entered in Get IPRange Service.
2022-02-16 11:39:15,383 [WebContainer : 0] INFO  advauth.util.AnaUtil(92) [] -> {dt.trace_id=05bf259d42a9e356e4f637cd372e7241, dt.span_id=c59ebc31ffc8247a} Get RiskAuth server AnA Configuration from properties file ...
2022-02-16 11:39:15,383 [WebContainer : 0] INFO  advauth.util.AnaUtil(92) [] -> {dt.trace_id=05bf259d42a9e356e4f637cd372e7241, dt.span_id=c59ebc31ffc8247a} Get RiskAuth server AnA Configuration from properties file ...
2022-02-16 11:39:15,384 [WebContainer : 0] INFO  risk.impl.IPRangeImpl(312) [] -> {dt.trace_id=05bf259d42a9e356e4f637cd372e7241, dt.span_id=c59ebc31ffc8247a} Entered in getIpRangesFromUnTrustedList
2022-02-16 11:39:15,396 [WebContainer : 0] ERROR risk.impl.IPRangeImpl(331) [] -> {dt.trace_id=05bf259d42a9e356e4f637cd372e7241, dt.span_id=c59ebc31ffc8247a} SSLSocketFactory is null. This can occur if javax.net.ssl.SSLSocketFactory.getDefault() is called to create a socket and javax.net.ssl.* properties are not set.

 

Environment

Release : 9.1

Component : RiskMinder(Arcot RiskFort)

Resolution

In restapi.properties file( Found at ARCOT_HOME/conf directory) if SSL in configured, please make sure to use the P12 file as described below-

#Transport Type, Possible values are TCP and SSL

TRANSPORT_TYPE=SSL

 

# Required if TRANSPORT_TYPE = SSL: CA certificate file. 

CA_CERT_FILE=<Path to .P12 file>

 

#Use CLIENT_P12_FILE for the client PKCS 12 file (contains client key and certificate pair)

#Use CLIENT_P12_PASSWORD for the password of the aforementioned PKCS 12 file