Management Module "Action" to integrate to UIM is not working

Products

• CA Application Performance Management (APM / Wily / Introscope)

Issue/Introduction

We had a working integration between APM and UIM through APM's "Actions" under management modules. It broke when we changed over APM and UIM to secure login. We have tried to use the integration account that is local to UIM that we have been using, but it continues to fail. In the APM EM logs we have observed the following errors.

[INFO] [Alarm Pooled Worker] [Manager.Action] https://<UIM-Host>:443/rest/alarms/createAlarm
[ERROR] [Alarm Pooled Worker] [Manager.Action] 

java.security.cert.CertificateException: No subject alternative DNS name matching <UIM-Host> found.
 at sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:204)
 at sun.security.util.HostnameChecker.match(HostnameChecker.java:95)
 at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:455)
 at sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:436)
 at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:200)
 at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
 at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1491)
 at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
 at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
 at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
 at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
 at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
 at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
 at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
 at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
 at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
 at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1316)
 at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1291)
 at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)
 at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.postSecured(UIMAlertAction.java:512)
 at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.sendAlertToUIM(UIMAlertAction.java:492)
 at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.executeAction(UIMAlertAction.java:297)
 at com.wily.introscope.server.enterprise.entity.alertaction.internal.AlertActionExecutor$ActionRunnable.run(AlertActionExecutor.java:71)
 at com.wily.EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:725)
 at java.lang.Thread.run(Thread.java:745)

 

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.sendAlertToUIM(UIMAlertAction.java:500)
    at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.executeAction(UIMAlertAction.java:297)
    at com.wily.introscope.server.enterprise.entity.alertaction.internal.AlertActionExecutor$ActionRunnable.run(AlertActionExecutor.java:71)
    at com.wily.EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:725)
    at java.lang.Thread.run(Thread.java:745)
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)
    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)
    at sun.security.validator.Validator.validate(Validator.java:260)
    at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)
    at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)
    at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124)
    at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1491)
    at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)
    at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)
    at sun.security.ssl.Handshaker.process_record(Handshaker.java:914)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1062)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1375)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1403)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1387)
    at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:185)
    at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnection.java:1316)
    at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1291)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURLConnectionImpl.java:250)
    at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.postSecured(UIMAlertAction.java:512)
    at com.wily.introscope.extensions.em.alertactions.UIMAlertAction.sendAlertToUIM(UIMAlertAction.java:492)
    ... 4 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
    at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
    ... 24 more

 

 

Environment

Release : 10.7.0

Component : Introscope

Resolution

Imported UIM certificates in APM MOM EM JVM keystore.

Location: <APM MOM EM HOME>\jre\lib\security\cacerts

Recycle both APM and UIM environments.