SSLHandshakeException when collecting from EV.Cloud

book

Article ID: 100042762

calendar_today

Updated On:

Description

Error Message

[#990000021] : Details - [#990000007] Web Client could not send request to EV.cloud.Detailsjavax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://api.lax.archivecloud.net/authentication/token: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.  Please check icp-logs for details.

Cause

Recent migrations on the back-end of EV.Cloud resulted in a change to their SSL Certificates. The current Java CACerts Keystore doesn't include the necessary intermediate certificate to complete the handshake for the collection.

Resolution

1) RDP to the Clearwell server(s)

2) Download the correct intermediate certificate at https://www.digicert.com/CACerts/DigiCertSHA2ExtendedValidationServerCA.crt

3) Open CMD at "C:\\jre\lib\security\"

4) Run CMD (including the full C:\ path):   C:\\bin\keytool.exe -import -trustcacerts -alias DigiSHA2EVCAinter -file "

5) When prompted for the password, enter 'changeit' (no quotes)

6) Once successfully imported, attempt to run EV.Cloud discovery which should now complete successfully.

 

[#990000021] : Details - [#990000007] Web Client could not send request to EV.cloud.Detailsjavax.net.ssl.SSLHandshakeException: SSLHandshakeException invoking https://api.lax.archivecloud.net/authentication/token: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. Please check icp-logs for details.

Issue/Introduction

"Unable to find valid certification path to requested target" displays when attempting to perform EV.Cloud discovery.