CA Identity ManagerCA Identity GovernanceCA Identity Portal
Issue/Introduction
Pentaho Kettle data-integration tool throws an exception when trying to connect to appliance. Complains about SSLHandshake issue.
Input Accounts.0 - Starting to initialize... data is com.ca.rcm.pdi.steps.input.accounts.RCMAccountsInputData@152c802f 2018/04/11 13:54:51 - Input Accounts.0 - ERROR (version 6.1.0.1-196, build 1 from 2016-04-07 12.08.49 by buildguy) : Unexpected error 2018/04/11 13:54:51 - Input Accounts.0 - ERROR (version 6.1.0.1-196, build 1 from 2016-04-07 12.08.49 by buildguy) : com.sun.jersey.api.client.ClientHandlerException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present 2018/04/11 13:54:51 - Input Accounts.0 - at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:151) 2018/04/11 2018/04/11 13:54:51 - Input Accounts.0 - at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source) 2018/04/11 13:54:51 - Input Accounts.0 - at java.net.HttpURLConnection.getResponseCode(Unknown Source)
Environment
Identity Suite vApp 14.1
Cause
This is the root error:
java.security.cert.CertificateException: No subject alternative names present
This is a problem with the self signed certificate included with vApp. It does not have any subject alternative names present.
Resolution
There are two solutions:
1. Deploy your own certificate that has Subject Alternative Names defined and use one of those values when connecting in the Pentaho tool. 2. Modify the connection URL from the Pentaho tool to connect to http://<vAppIPAddress>:8082