Uploaded image for project: 'Subscription Watch'
  1. Subscription Watch
  2. SWATCH-2970

Swatch Producer Azure service throws certificate exceptions when getting the azure context

XMLWordPrintable

      This error can be seen in EE:

      Caused by: javax.net.ssl.SSLHandshakeException: Failed to create SSL connection
      	at io.vertx.core.net.impl.ChannelProvider$1.userEventTriggered(ChannelProvider.java:127)
      	... 25 more
      Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      	at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
      	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:378)
      	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)
      	at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:316)
      	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1351)
      	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1226)
      	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1169)
      	at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
      	at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
      	at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1277)
      	at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1264)
      	at java.base/java.security.AccessController.doPrivileged(AccessController.java:712)
      	at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1209)
      	at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1649)
      	at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1495)
      	at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1336)
      	... 20 more
      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
      	at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
      	at java.base/sun.security.validator.Validator.validate(Validator.java:264)
      	at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:285)
      	at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144)
      	at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1329)
      	... 31 more
      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
      	at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
      	at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
      	at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
      	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
      	... 36 more
      

      There are two actual problems here:

      • we were using a wrong certificate configuration that didn't exist
      • we were using the wiremock service to interact with the actual contracts service

      Acceptance Criteria

      • Fix the certificate issue and confirm the issue is gone by checking the test "test_verify_multi_cloud_provider_usage".

              jcarvaja@redhat.com Jose Carvajal Hilario
              jcarvaja@redhat.com Jose Carvajal Hilario
              Lisa Walker Lisa Walker
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: