Hi,
There is a customer case with our vSphere web client plugin. The virgo log file shows some CertificateException and this caused our plugin cannot get any info of vCenter. Anyone can help on this?
@laurentsd , could you give some insights on this? I saw you already get involved in some support on this kind of issue. Thanks so much!
[2017-03-08T15:50:56.291Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.utils.Utilities The IP address resolved from na930950-sal.xxxxxx.com is 10.36.22.200
[2017-03-08T15:50:56.291Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl The service url is: https://na930950-sal.xxxxxx.com:443/sdk
[2017-03-08T15:50:56.291Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl The vCenter server information extracted from usersession is:
[2017-03-08T15:50:56.291Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl The vCenter server name: na930950-sal.xxxxxx.com
[2017-03-08T15:50:56.291Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl The vCenter server serviceGuid: 5222295d-xxxx-48a1-xxxx-a86c6cfa5e34
[2017-03-08T15:50:56.292Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl The vCenter server sessionCookie: "8558cc3eae641c6700d96e4909ee7e600b8a211c"
[2017-03-08T15:50:56.292Z] [INFO ] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl The vCenter server thumbprint: 36:A2:86:25:C5:5B:81:DC:D7:B7:5D:7D:CE:83:7D:36:xx:xx:xx:xx
[2017-03-08T15:50:56.319Z] [ERROR] http-bio-9090-exec-18 com.emc.vsi.providers.utils.SdkTraversalUtilities getServiceContent error: com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Server certificate chain is not trusted and thumbprint doesn't match
at com.sun.xml.internal.ws.transport.http.client.HttpClientTransport.getOutput(Unknown Source)
at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(Unknown Source)
at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(Unknown Source)
at com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(Unknown Source)
at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Unknown Source)
at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Unknown Source)
at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Unknown Source)
at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Unknown Source)
at com.sun.xml.internal.ws.client.Stub.process(Unknown Source)
at com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(Unknown Source)
at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknown Source)
at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknown Source)
at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(Unknown Source)
at com.sun.proxy.$Proxy513.retrieveServiceContent(Unknown Source)
at com.emc.vsi.providers.utils.SdkTraversalUtilities.getServiceContent(SdkTraversalUtilities.java:187)
...
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Server certificate chain is not trusted and thumbprint doesn't match
at sun.security.ssl.Alerts.getSSLException(Unknown Source)
at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
...
Caused by: java.security.cert.CertificateException: Server certificate chain is not trusted and thumbprint doesn't match
at com.hp.asi.hpic4vc.provider.utils.ssl.ThumbprintTrustManager.checkServerTrusted(ThumbprintTrustManager.java:150)
at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(Unknown Source)
... 101 common frames omitted
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
at sun.security.validator.Validator.validate(Unknown Source)
at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
at com.hp.asi.hpic4vc.provider.utils.ssl.ThumbprintTrustManager.checkServerTrusted(ThumbprintTrustManager.java:133)
... 102 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)
at java.security.cert.CertPathBuilder.build(Unknown Source)
... 109 common frames omitted
[2017-03-08T15:50:56.319Z] [ERROR] http-bio-9090-exec-18 com.emc.vsi.providers.usersession.UserSessionInfoServiceImpl ServiceContent is null