search cancel

After upgrade to 22.2.2 unable to login to console 500 error

book

Article ID: 253759

calendar_today

Updated On:

Products

DX NetOps

Issue/Introduction

We are unable to access the console login, we get 500 server error in the browser.

When we try to check settings in SsoConfig, it simply closes.

Environment

Release : 22.2

Cause

The first attempt to upgrade failed do to unrelated problem, this caused InstallAnywhere to first save, then delete the old SSL certs.

Resolution

Restore cacerts from backup and restart the console services in order.

/opt/CA/jre/lib/security/cacerts

Additional Information

We see these errors in ssoservice.log

...

ARN  | qtp1934216794-56         | 2022-11-04 23:59:54,495 | org.eclipse.jetty.server.HttpChannel                            

      | handleException /sso/sign-in.jsp javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://127.0.0.1:8182/pc/center/webservice/sso?WSDL: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

INFO  | qtp1934216794-61         | 2022-11-04 23:59:55,038 | org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean

      | Creating Service {http://netqos.com/SingleSignOnWS}SingleSignOnWSSoapService from class com.netqos.singlesignonws.SingleSignOnWSSoap

WARN  | qtp1934216794-61         | 2022-11-04 23:59:55,079 | org.eclipse.jetty.server.HttpChannel                            

      | handleException /sso/sign-in.jsp javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://127.0.0.1:8182/pc/center/webservice/sso?WSDL: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

INFO  | qtp1934216794-58         | 2022-11-04 23:59:55,897 | org.apache.cxf.wsdl.service.factory.ReflectionServiceFactoryBean

      | Creating Service {http://netqos.com/SingleSignOnWS}SingleSignOnWSSoapService from class com.netqos.singlesignonws.SingleSignOnWSSoap

WARN  | qtp1934216794-58         | 2022-11-04 23:59:55,932 | org.eclipse.jetty.server.HttpChannel                             

      | handleException /sso/sign-in.jsp javax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://127.0.0.1:8182/pc/center/webservice/sso?WSDL: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target