SSL exceptions when using a Data Driven VS in an environment configured to use SSL between components

Products

• CA Application Test
• CA Continuous Application Insight (PathFinder)
• Service Virtualization

Issue/Introduction

Getting the below errors when trying to a Data Driven Virtual Service on an environment that is configured to use SSL between components:

retrofit.RetrofitError: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

com.google.common.util.concurrent.UncheckedExecutionException: retrofit.RetrofitError: Hostname <hostname> not verified.

 

Environment

All supported DevTest releases.

SSL is enabled between components.

The keystore and truststore in use are not the default ones delivered with DevTest.

Cause

N/A

Resolution

To fix the the exception "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target":
1. Export the keystore certificate.
2. Import the certificate to the truststore. By default, DevTest uses the cacerts under the $DEVTEST_HOME/lib/jre/security/.

To fix the "com.google.common.util.concurrent.UncheckedExecutionException: retrofit.RetrofitError: Hostname <hostname> not verified" exception:
Configure the VSE service to use the fully qualified domain name (FQDN) to start the VSE and also to connect to the Registry.
1. Go to the VSE Server and edit the VirtualServiceEnvironmentService.vmoptions file and add the following properties: 

-Dlisa.vseName=ssl://<FQDNforVSE>:2013/VSE 
-Dlisa.registry.url=ssl://FQDNforRegistryServer:2010/Registry 

2. Stop All DevTest components. 
3. Delete the $lisatmp_folder, or take a backup if you would like. 
4. Start DevTest components. When connecting the Workstation to the Registry, use the FQDN of your Registry server. 
5. Send a new request to the data driven VSM. 
 

Additional Information

For more information regarding DevTest and SSL, please refer to KB: SSL, Java and DevTest