RC installation fails when a secure socket layer protocol (HTTPS) is applied to web server (Legacy KB ID CNC TS27998 )

book

Article ID: 52054

calendar_today

Updated On:

Products

EHEALTH CA eHealth

Issue/Introduction

If you plan to install Report Center on an eHealth system that has SSL enabled with a self-signed certificate, perform the following procedure BEFORE you install Report Center:

1) Copy the self-signed certificate from $NH_HOME/web/httpd/conf directory to $NH_HOME\jre\bin.

2) Import the self-signed certificate into the existing keystore using this command:

On UNIX systems:

$NH_HOME\Jre\bin>keytool -import -file server.crt -trustcacerts -keypass changeit -storepass changeit -keystore $NH_HOME\jre\lib\security\cacerts

On Windows systems:

C:\ehealth\Jre\bin>keytool -import -file server.crt -trustcacerts -keypass changeit -storepass changeit -keystore C:\ehealth\jre\lib\security\cacerts

The command output looks like the following:

Owner: EMAILADDRESS=NA, O=systemname, L=someCity, ST=someState, C=US, CN=systemname
Issuer: EMAILADDRESS=NA, O=systemname, L=someCity, ST=someState, C=US, CN=systemname
Serial number: systemserialnumber
Valid from: Tue Mar 20 16:36:08 EDT 2007
until: Wed Mar 19 16:36:08 EDT 2008
Certificate fingerprints:
MD5: B0:75:ED:F2:95:1E:F3:CA:7B:7D:1B:F7:66:95:03:0A
SHA1: 26:DD:FB:B2:37:F7:C6:94:16:AA:20:56:15:B2:D2:31:F2:F1:43:2F

3) When the following prompt appears, respond with yes:

Trust this certificate? [no]: yes

The certificate is added to keystore.

Related Issues/Questions:
RC installation failed with error of testing connection to eHealth Report Center Server
Report Center Install failed
RC installation fails when a secure socket layer protocol (HTTPS) is applied to web server
Error in $NH_HOME/log/install/RCTestConnection.logTesting login to Report Center Servers. Testing login to Report Center Servers.Error: Failed to connect to ReportCenter

Details:CM-CAM-4005 Unable to authenticate. Check your security directory server connection and confirm the credentials entered at login.CAM-AAA-0179 The 3rd party provider returned an unrecoverable exception.javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found