Thanks Fred - 

This seems to have cleared most of the problems!  We were able to load the WSDL 
now.

Sue

-----Original Message-----
From: Barber, Sue 
Sent: Tuesday, October 02, 2012 3:53 PM
To: arslist@ARSLIST.ORG
Subject: RE: URI not found - https

We were looking at this as well - we're going to load the certs locally and 
will let you know how it goes in  the morning.  Thanks for all the ideas so far!

Sue

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Grooms, Frederick W
Sent: Tuesday, October 02, 2012 2:43 PM
To: arslist@ARSLIST.ORG
Subject: Re: URI not found - https

Someone on the list will correct me if I am wrong but,  When you are loading a 
WSDL into Developer Studio you are not using the server at all right then.  
Everything is being performed on your local machine so the certificate needs to 
be installed into the java you are using to run DevStudio with as well as on 
the server so it can be used in the filter call.

Fred


-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue
Sent: Tuesday, October 02, 2012 1:17 PM
To: arslist@ARSLIST.ORG
Subject: Re: URI not found - https

** 
OK, he verified the certificate path and it is the one he updated on Friday, so 
the certificate that was updated was in the correct path?  Attempting to load 
the wsdl again and same messages.  

Sue

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller
Sent: Tuesday, October 02, 2012 1:47 PM
To: arslist@ARSLIST.ORG
Subject: Re: URI not found - https

** Thanks for the -Dpname trick!

Jason

-----Original Message-----
On Tue, Oct 2, 2012 at 9:51 AM, Axton  wrote:
** It's not a straight forward thing to do, but here is how I do it:

1. Identify the plugin server configuration file.  It will contain the <plugin> 
entry for "ARSYS.ARF.WEBSERVICE":
    <plugin>
      <name>ARSYS.ARF.WEBSERVICE</name>
      <pathelement 
type="location">/path/to/ARSystem/pluginsvr/websvcjava75.jar</pathelement>
      <classname>com.bmc.arsys.ws.plugin.WSPlugin</classname>
    </plugin>

2. Identify the port that the plugin server listens on (defined in the 
pluginsvr_config.xml):
<pluginsvr_config>
  <port>4052</port>
...

3. Find the process that the port is bound to:
[user@server ~]$ lsof -u user |grep LISTEN |grep 4052
java      14599 user   11u  IPv4 0x60084001480        0t0       TCP server:4052 
(LISTEN)

You now have several pieces of information:
1. The installation path for the correct plugin server
2. The configuration file for the correct plugin server
3. The PID of the currently running plugin server

With this information you can identify the correct entry in armonitor.conf that 
you need to modify to add the java keystore parameters.

This is a little off topic, but I have simplified the process by adding markers 
for each of the java processes.  This makes identifying each process easy:

[user@server ~]$ ps -fu user |grep java |grep -v grep
 user 14606 13861   0   Oct 01 ?           2:15 java -Dpname=PluginSvrAtrium 
-server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max
 user 14610 13861   0   Oct 01 ?           1:16 
/path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m
 user 14600 13861   0   Oct 01 ?         193:57 
/path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava.
 user 14605 13861   0   Oct 01 ?           3:12 java -Dpname=PluginSvrNE 
-server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm
 user 14599 13861   0   Oct 01 ?           4:02 ./java -Dpname=PluginSvrMain 
-server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max
 user 14608 13861   0   Oct 01 ?           2:35 
/path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm

I added a -Dpname parameter to each of the java processes.  The -D parameter 
let's you add arbitrary command line parameters to the java processes.  Now, if 
I want to identify the email engine, I can find the PID like this:

[user@server ~]$ ps -fu user |grep Email |grep -v grep
 user 14600 13861   0   Oct 01 ?         194:08 
/path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava.

Axton Grams

-----Original Message-----
On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue  wrote:
** 
Hi Axton,
 
In speaking to my network administrator, he said that they did note the certs 
were not current and he updated them based on what he believed the proper 
location was, but there are multiple other javas on the machine.  Can you tell 
me how to determine which location we would need to ensure the certification is 
updated?
 
Thank you, Sue

-----Original Message----- 
From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Axton
Sent: Tuesday, October 02, 2012 10:04 AM
To: arslist@ARSLIST.ORG
Subject: Re: URI not found - https
 
** Based on the stack trace, your JVM needs the certificates in the 
certification path.  If you are calling out to a web service, then this applies 
to the JVM that the Java based plugin server uses.  Get public parts of the 
certificates from the Root CA to the end node and create a java keystore that 
contains the certificates and change the JVM configuration to use that keystore:
http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html
 
The second part of the issue seems to be that the url is not valid; hence the 
URI not found error.  As Frederick suggested, check the URI in a browser.
 
Axton Grams

-----Original Message-----
On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W  wrote:
Sue,
What happens when you try to open that same https WSDL url on a browser on your 
machine?

Fred

-----Original Message-----
From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue
Sent: Tuesday, October 02, 2012 8:48 AM
To: arslist@ARSLIST.ORG
Subject: URI not found - https

**
Happy October!

We are attempting to load a WSDL as a set fields action in a filter.  It works 
if we use an http, but we get the following error as a https entry.  I have 
reviewed previous posts on the issue and have found nothing that has fixed our 
issue, so I thought I would ask again if anyone has been able to resolve this 
issue or at least point me in the right direction.

ARS Server is: 
7.6.03 Build 001
Linux OS
Oracle DB 11.2


ERROR: URI not found https://xxxxxxxxxxxxxxx.svc?wsdl

Additional Details:
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target
com.bmc.arsys.ws.util.ARWSException: URI not found 
https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl
                at 
com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176)
                at com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219)


Thanks in advance, Sue Barber

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"

_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
attend wwrug12 www.wwrug12.com ARSList: "Where the Answers Are"

Reply via email to