Lucene search does not work when SSL enabled

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

Lucene search does not work when SSLenabled=1 for REST with self-signed certificate.

Steps for reproduction:

1. Utilize self-signed cert for JCP
2. Set sslEnabled=1 in UCSrv.ini file
3. Got to AWI and utilize global search

Expected results: global search works as expected in AWI

Actual results: global search does not work in AWI

Error: No results found

The AWI log provides the following error message:

Can't connect to REST endpoint 'https://ae-linux:8088': PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

2022-06-16 13:34:04,972 pool-1-thread-2 [DEBUG] Automic 21:100/RYAN/UC4 node0gvfgfyi9vcou1jtd16lv1w7cb0-0 0000000001046008 +66 [com.uc4.ecc.framework.entrypoint.core.dialogs.search.GlobalSearchResultGroupView] - Error shown:

java.lang.RuntimeException: java.util.concurrent.ExecutionException: com.uc4.ecc.backends.exceptions.AutomationEngineAPIException: Can't connect to any REST-endpoint, please check if at least one JCP is running and is reachable via network.

Environment

Product: Automic Workload Automation - Automation Engine

Release : 21.0.3

Cause

Defect: AWI uses the certificates in the trustedCertFolder only for the validation of the websocket connections, but not for the validation of HTTPS rest endpoints.

Resolution

Upgrade to the following version of Automation Engine or higher:

Automation.Engine 21.0.5 - released