500 error when accessing portal after upgrade

Products

• Network Observability
• CA Performance Management

Issue/Introduction

We see the following error in the /opt/CA/PerformanceCenter/DMService.log after multiple failed upgrade attempts:

INFO   | jvm 1    | <date> <time> | Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Environment

Upgrade to any supported release with multiple retries

Cause

The java cacerts file can be overwritten with the default if there are multiple upgrade attempts:

Resolution

Find the location of the cacerts backup from the first attempt.

/opt/CA/PerformanceCenter/InstallLogs/ssl-backup.<date>_<time>/jre_security/cacerts

1) Back up /opt/CA/PerformanceCenter/jre/lib/security/cacerts

2) Copy /opt/CA/PerformanceCenter/InstallLogs/ssl-backup.<date>_<time>/jre_security/cacerts to /opt/CA/PerformanceCenter/jre/lib/security/cacerts 

3) Restart the services (mysql not needed), verify if the issue persists.