Failed to Validate Certificate .The application will not be executed .

[Anon Anon]

Hi all ,

 

Recently i have configured Https to CA RA 4.7 .After all the configurations i was able to login to  web console with https but when i am trying to open the Automation Studio with https url it show the following error .

 

 

 

Any help Appreciated

 

Thanks

gowtham 

[Keith Puzey]

Hi,

 

    As well as configuring the SSL certificate for the NAC you also need to update the jar file with the certificates, you can find all the steps in the section called "Secure UI Communication" at the following URL:

 

     Secure Communications - CA Release Automation - 5.5.2 - CA Technologies Documentation

 

     Let me know if you need any more assistance.

 

Regards

Keith

[James Panetti]

I also very much recommend upgrading when it's reasonable to do so. 4.7.x is no longer supported, whereas the latest version has tons of improvements and bug fixes included, as well as a lot of quality of life improvements in general.  Personally, I find it much easier to work with.

[Anon Anon]

I managed to make it work using Keith Puzey's doco. From you error I assume you are using your own certificates. For the ASAP GUI, you need to create a file ${NACDIR}/webapps/nolio-app/apps/v2.0.0/lib/custom-truststore.jar. It must be named that exactly. This jar file contains a keystore that must be named nolio.jks. You also need a code-signing keystore to sign the jar file.

Here is the bash code I am using for this. Since there are only variable names in it I can share this. Hope this helps and does not throw additional confusion.

 

# Abbreviations used in variable names

# CS/cs = codesigning

# KS/ks = keystore

# TS/ts = truststore

 

  # 3. Create the ASAP truststore's JAR.

 

  # Import ZKB official cert in the nolio.jks for ASAP truststore.

  import_cert ${_repo}/nolio.jks ${CARA_KSPW} ${_rte_alias} ${_rte_certfile}

  # Copy codesigning cert and change its alias.

  cp -fp keystore_codesigning-ra.prod.zkb.ch.jks \

    ${_repo}/zkb-cara-codesigning.jks

  change_alias ${_repo}/zkb-cara-codesigning.jks \

              ${CARA_CSPW} ${CARA_CS_ALIAS}

  # Create and sign the jar file with the codesigning cert.

  # We must be on the relative directory where nolio.jks is stored so

  # that the jar file will reference nolio.jks without any path prepended.

  ( cd ${_repo} && ${JAR} -cvf ${_asap_ts} nolio.jks )

  ${JARSIGNER} -keystore ${_repo}/zkb-cara-codesigning.jks \

        -storepass ${CARA_CSPW} -verbose \

        ${_asap_ts} ${CARA_CS_ALIAS}

  if (( $? == 0 )); then

    debug "$INFO: codesigning ${_asap_ts} OK"

  else

    echo "$ERROR: codesigning ${_asap_ts} NOT OK" >&2

    exit 1

  fi

[Michael Gebhardt]

hu, didn't notice you had the same error: Secure UI Communication - Automation Studio not running anymore! (5.5.2.191)

 

for us the problem appears to be the different versions of the included jre and the jdk I used to create and sign the jar file