On Mon, Mar 26, 2012 at 3:34 PM, Shawn Beard <sh...@pennmanor.net> wrote: > I just unboxed a bunch of Polycom 335 and 550's but they won't > autoprovision. They all display a 0x20 config error. I can manually create > profiles and they will register fine. I found the below in my > sipxprovision.log which points to a cert issue. I did install a new cert > last week but it's a wildcard cert that we use on other servers. Browsers > don't report a cert issue and the SSLPoke java tool seems to connect fine. > I did try importing the ca into the cacerts file using keytool but that > hasn't fixed the issue
Which CA file? There's a web interface in admin ui to add CAs. . Any help would be appreciated. > > Thanks > > "2012-03-26T19:29:19.001000Z":29::INFO:sipx1.pennmanor.net:SocketListener0- > 1:00000000:Servlet:"GET /0004f23fef22-sipx-device.cfg User-Agent: > FileTransport PolycomSoundPointIP-SPIP_335-UA/3.2.4.0267" > "2012-03-26T19:29:19.001000Z":30::INFO:sipx1.pennmanor.net:SocketListener0- > 1:00000000:Servlet:"writeConfigurationResponse - > /0004f23fef22-sipx-device.cfg" > "2012-03-26T19:29:19.010000Z":31::ERR:sipx1.pennmanor.net:SocketListener0-1 > :00000000:Servlet:"REST HTTPS GET failed:" > javax.net.ssl.SSLHandshakeException: > sun.security.validator.ValidatorException: PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: unable to find > valid certification path to requested target > at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) > at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1697) > at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:258) > at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:252) > at > sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1 > 165) > at > sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:154) > at sun.security.ssl.Handshaker.processLoop(Handshaker.java:610) > at sun.security.ssl.Handshaker.process_record(Handshaker.java:546) > at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:945) > at > sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1 > 190) > at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1217) > at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1201) > at > sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:440) > at > sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Abstr > actDelegateHttpsURLConnection.java:185) > at > sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectio > nImpl.java:153) > at > org.sipfoundry.sipxprovision.auto.Servlet.writeProfileConfigurationResponse > (Servlet.java:573) > at org.sipfoundry.sipxprovision.auto.Servlet.doGet(Servlet.java:539) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:596) > at javax.servlet.http.HttpServlet.service(HttpServlet.java:689) > at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:427) > at > org.mortbay.jetty.servlet.ServletHandler.dispatch(ServletHandler.java:665) > at > org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:567) > at org.mortbay.http.HttpContext.handle(HttpContext.java:1565) > at org.mortbay.http.HttpContext.handle(HttpContext.java:1517) > at org.mortbay.http.HttpServer.service(HttpServer.java:954) > at org.mortbay.http.HttpConnection.service(HttpConnection.java:814) > at org.mortbay.http.HttpConnection.handleNext(HttpConnection.java:981) > at org.mortbay.http.HttpConnection.handle(HttpConnection.java:831) > at > org.mortbay.http.SocketListener.handleConnection(SocketListener.java:244) > at org.mortbay.util.ThreadedServer.handle(ThreadedServer.java:357) > at org.mortbay.util.ThreadPool$PoolThread.run(ThreadPool.java:534) > Caused by: sun.security.validator.ValidatorException: PKIX path building > failed: sun.security.provider.certpath.SunCertPathBuilderException: unable > to find valid certification path to requested target > at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:324) > at > sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:224) > at sun.security.validator.Validator.validate(Validator.java:235) > at > sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:14 > 7) > at > sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerIm > pl.java:230) > at > sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerIm > pl.java:270) > at > sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1 > 144) > ... 26 more > Caused by: sun.security.provider.certpath.SunCertPathBuilderException: > unable to find valid certification path to requested target > at > sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBu > ilder.java:197) > at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:255) > at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:319) > > > ***************************************** > Shawn Beard > Enterprise Systems Engineer > Penn Manor School District > www.pennmanor.net <http://www.pennmanor.net/> > (717)872-9500 x2354 > > > > > >> > > _______________________________________________ > sipx-users mailing list > sipx-users@list.sipfoundry.org > List Archive: http://list.sipfoundry.org/archive/sipx-users/ _______________________________________________ sipx-users mailing list sipx-users@list.sipfoundry.org List Archive: http://list.sipfoundry.org/archive/sipx-users/
