SSL exceptions when using a Data Driven VS in an environment configured to use SSL between components

Document ID : KB000091934
Last Modified Date : 30/05/2018
Show Technical Document Details
Issue:
Getting the below errors when trying to a Data Driven Virtual Service on an environment that is configured to use SSL between components:
retrofit.RetrofitError: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

com.google.common.util.concurrent.UncheckedExecutionException: retrofit.RetrofitError: Hostname <hostname> not verified.

 
Environment:
DevTest on release 10.2.
SSL is enabled between components.
The keystore and truststore in use are not the default ones delivered with DevTest.
Resolution:
To fix the the exception "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target":
1. Export the keystore certificate.
2. Import the certificate to the truststore. By default, DevTest uses the cacerts under the $DEVTEST_HOME/lib/jre/security/.

To fix the "com.google.common.util.concurrent.UncheckedExecutionException: retrofit.RetrofitError: Hostname <hostname> not verified" exception:
Configure the VSE service to use the fully qualified domain name (FQDN) to start the VSE and also to connect to the Registry.
1. Go to the VSE Server and edit the VirtualServiceEnvironmentService.vmoptions file and add the following properties: 
-Dlisa.vseName=ssl://<FQDNforVSE>:2013/VSE 
-Dlisa.registry.url=ssl://FQDNforRegistryServer:2010/Registry 
2. Stop All DevTest components. 
3. Delete the $lisatmp_folder, or take a backup if you would like. 
4. Start DevTest components. When connecting the Workstation to the Registry, use the FQDN of your Registry server. 
5. Send a new request to the data driven VSM. 
 
Additional Information:
For more information regarding DevTest and SSL, please refer to the document in the link below:
Of SSL, Java and DevTest - https://comm.support.ca.com/kb/Of-SSL-Java-and-DevTest/KB000009925