Issue with virtual app data integration tool

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

Pentaho Kettle data-integration tool throws an exception when trying to connect to appliance. Complains about SSLHandshake issue.

Input Accounts.0 - Starting to initialize... data is com.ca.rcm.pdi.steps.input.accounts.RCMAccountsInputData@152c802f 2018/04/11 13:54:51 - Input Accounts.0 - ERROR (version 6.1.0.1-196, build 1 from 2016-04-07 12.08.49 by buildguy) : Unexpected error 2018/04/11 13:54:51 - Input Accounts.0 - ERROR (version 6.1.0.1-196, build 1 from 2016-04-07 12.08.49 by buildguy) : com.sun.jersey.api.client.ClientHandlerException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present 2018/04/11 13:54:51 - Input Accounts.0 - at com.sun.jersey.client.urlconnection.URLConnectionClientHandler.handle(URLConnectionClientHandler.java:151) 2018/04/11  2018/04/11 13:54:51 - Input Accounts.0 - at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source) 2018/04/11 13:54:51 - Input Accounts.0 - at java.net.HttpURLConnection.getResponseCode(Unknown Source)

Environment

Identity Suite vApp 14.1

Cause

This is the root error:

java.security.cert.CertificateException: No subject alternative names present

This is a problem with the self signed certificate included with vApp. It does not have any subject alternative names present.

Resolution

There are two solutions:

1. Deploy your own certificate that has Subject Alternative Names defined and use one of those values when connecting in the Pentaho tool.
2. Modify the connection URL from the Pentaho tool to connect to http://<vAppIPAddress>:8082