Hi ,
Recently we have done a Apache http component migration from 3.1 to 4.4.1.
We have changed the connection manager implementation from
MultiThreadedHttpConnectionManager (3.1 implementation) to
PoolingHttpClientConnectionManager (apache httpclient 4.4.1).
Now we are getting SSL socket exception when we are trying to request using the
connection.
Exception trace:
[9/8/15 12:04:27:192 IST] 00000064 SystemErr R
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.g: PKIX path building
failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl
could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate
issued by CN=mumgo3206.in.oracle.com, OU=Root Certificate, OU=RSAppSrvCell1,
OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate
chaining error
[9/8/15 12:04:27:193 IST] 00000064 SystemErr R at
com.ibm.jsse2.n.a(n.java:28)
[9/8/15 12:04:27:193 IST] 00000064 SystemErr R at
com.ibm.jsse2.tc.a(tc.java:251)
[9/8/15 12:04:27:193 IST] 00000064 SystemErr R at
com.ibm.jsse2.gb.a(gb.java:251)
[9/8/15 12:04:27:194 IST] 00000064 SystemErr R at
com.ibm.jsse2.gb.a(gb.java:228)
[9/8/15 12:04:27:194 IST] 00000064 SystemErr R at
com.ibm.jsse2.hb.a(hb.java:279)
[9/8/15 12:04:27:194 IST] 00000064 SystemErr R at
com.ibm.jsse2.hb.a(hb.java:292)
[9/8/15 12:04:27:194 IST] 00000064 SystemErr R at
com.ibm.jsse2.gb.n(gb.java:71)
[9/8/15 12:04:27:194 IST] 00000064 SystemErr R at
com.ibm.jsse2.gb.a(gb.java:324)
[9/8/15 12:04:27:194 IST] 00000064 SystemErr R at
com.ibm.jsse2.tc.a(tc.java:559)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
com.ibm.jsse2.tc.g(tc.java:25)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
com.ibm.jsse2.tc.a(tc.java:582)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
com.ibm.jsse2.tc.startHandshake(tc.java:652)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:134)
[9/8/15 12:04:27:195 IST] 00000064 SystemErr R at
org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
[9/8/15 12:04:27:196 IST] 00000064 SystemErr R at
org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
[9/8/15 12:04:27:196 IST] 00000064 SystemErr R at
org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
[9/8/15 12:04:27:196 IST] 00000064 SystemErr R at
org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
[9/8/15 12:04:27:196 IST] 00000064 SystemErr R at
org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
[9/8/15 12:04:27:196 IST] 00000064 SystemErr R at
org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
[9/8/15 12:04:27:196 IST] 00000064 SystemErr R at
org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
[9/8/15 12:04:27:197 IST] 00000064 SystemErr R at
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:117)
[9/8/15 12:04:27:197 IST] 00000064 SystemErr R at
org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:55)
[9/8/15 12:04:27:197 IST] 00000064 SystemErr R at
com.citi.cpb.emea.revelation.proxy.ProxyServlet.sendApplicationRequest(ProxyServlet.java:392)
[9/8/15 12:04:27:197 IST] 00000064 SystemErr R at
com.citi.cpb.emea.revelation.proxy.ProxyServlet.doGet(ProxyServlet.java:130)
[9/8/15 12:04:27:197 IST] 00000064 SystemErr R at
javax.servlet.http.HttpServlet.service(HttpServlet.java:575)
[9/8/15 12:04:27:197 IST] 00000064 SystemErr R at
javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
[9/8/15 12:04:27:198 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1147)
[9/8/15 12:04:27:198 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:722)
[9/8/15 12:04:27:198 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:449)
[9/8/15 12:04:27:198 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
[9/8/15 12:04:27:198 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1020)
[9/8/15 12:04:27:198 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3639)
[9/8/15 12:04:27:199 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:304)
[9/8/15 12:04:27:199 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:950)
[9/8/15 12:04:27:199 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1659)
[9/8/15 12:04:27:199 IST] 00000064 SystemErr R at
com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:195)
[9/8/15 12:04:27:199 IST] 00000064 SystemErr R at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:452)
[9/8/15 12:04:27:199 IST] 00000064 SystemErr R at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:511)
[9/8/15 12:04:27:200 IST] 00000064 SystemErr R at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:305)
[9/8/15 12:04:27:200 IST] 00000064 SystemErr R at
com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:276)
[9/8/15 12:04:27:200 IST] 00000064 SystemErr R at
com.ibm.ws.ssl.channel.impl.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1048)
[9/8/15 12:04:27:200 IST] 00000064 SystemErr R at
com.ibm.ws.ssl.channel.impl.SSLConnectionLink$MyReadCompletedCallback.complete(SSLConnectionLink.java:642)
[9/8/15 12:04:27:200 IST] 00000064 SystemErr R at
com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1784)
[9/8/15 12:04:27:200 IST] 00000064 SystemErr R at
com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165)
[9/8/15 12:04:27:201 IST] 00000064 SystemErr R at
com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
[9/8/15 12:04:27:201 IST] 00000064 SystemErr R at
com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
[9/8/15 12:04:27:201 IST] 00000064 SystemErr R at
com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
[9/8/15 12:04:27:201 IST] 00000064 SystemErr R at
com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
[9/8/15 12:04:27:201 IST] 00000064 SystemErr R at
com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
[9/8/15 12:04:27:201 IST] 00000064 SystemErr R at
com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
[9/8/15 12:04:27:202 IST] 00000064 SystemErr R at
com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1648)
[9/8/15 12:04:27:202 IST] 00000064 SystemErr R Caused by:
com.ibm.jsse2.util.g: PKIX path building failed:
java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not
build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate
issued by CN=mumgo3206.in.oracle.com, OU=Root Certificate, OU=RSAppSrvCell1,
OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate
chaining error
[9/8/15 12:04:27:202 IST] 00000064 SystemErr R at
com.ibm.jsse2.util.e.b(e.java:30)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R at
com.ibm.jsse2.util.e.b(e.java:62)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R at
com.ibm.jsse2.util.d.a(d.java:11)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R at
com.ibm.jsse2.hc.a(hc.java:40)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R at
com.ibm.jsse2.hc.checkServerTrusted(hc.java:33)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R at
com.ibm.jsse2.hc.b(hc.java:80)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R at
com.ibm.jsse2.hb.a(hb.java:416)
[9/8/15 12:04:27:203 IST] 00000064 SystemErr R ... 48 more
[9/8/15 12:04:27:204 IST] 00000064 SystemErr R Caused by:
java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not
build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate
issued by CN=mumgo3206.in.oracle.com, OU=Root Certificate, OU=RSAppSrvCell1,
OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate
chaining error
[9/8/15 12:04:27:204 IST] 00000064 SystemErr R at
com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:411)
[9/8/15 12:04:27:204 IST] 00000064 SystemErr R at
java.security.cert.CertPathBuilder.build(CertPathBuilder.java:258)
[9/8/15 12:04:27:205 IST] 00000064 SystemErr R at
com.ibm.jsse2.util.e.b(e.java:103)
[9/8/15 12:04:27:205 IST] 00000064 SystemErr R ... 54 more
[9/8/15 12:04:27:205 IST] 00000064 SystemErr R Caused by:
java.security.cert.CertPathValidatorException: The certificate issued by
CN=mumgo3206.in.oracle.com, OU=Root Certificate, OU=RSAppSrvCell1,
OU=RSAppSrvNode1, O=IBM, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate
chaining error
[9/8/15 12:04:27:206 IST] 00000064 SystemErr R at
com.ibm.security.cert.BasicChecker.<init>(BasicChecker.java:111)
[9/8/15 12:04:27:206 IST] 00000064 SystemErr R at
com.ibm.security.cert.PKIXCertPathValidatorImpl.engineValidate(PKIXCertPathValidatorImpl.java:176)
[9/8/15 12:04:27:206 IST] 00000064 SystemErr R at
com.ibm.security.cert.PKIXCertPathBuilderImpl.myValidator(PKIXCertPathBuilderImpl.java:737)
Thanks & Regards,
Bhuvaneswari
