AIX Agent Connectivity Issue - No trusted certificate found

[Parthiban SG]

Hi,

I am performing an AIX agent installation (nolio_agent_aix_6_6_0_b9640.sh) and agent is unable to connect to NES server. After examining the logs, below error is displayed when agent is trying to make connection to NES

2020-12-14 16:48:28,051 [New I/O client worker #1-1] ERROR (com.nolio.nimi.comm.impl.nettysupport.BasicHandler:57) - NimiConnectionImpl{remoteAddress=null, localAddress=null, connectionID=null, channel=null, closed=true, lastAccessedTime=1607935707139}:javax.net.ssl.SSLHandshakeException: General SSLEngine problem
javax.net.ssl.SSLHandshakeException: General SSLEngine problem
at com.ibm.jsse2.ib.A(ib.java:350)
at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:28)
at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:479)
at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.java:529)
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:24)
at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:868)
at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:605)
at org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:282)
at org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:214)
at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:274)
at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:261)
at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:349)
at org.jboss.netty.channel.socket.nio.NioWorker.processSelectedKeys(NioWorker.java:281)
at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:201)
at org.jboss.netty.util.internal.IoWorkerRunnable.run(IoWorkerRunnable.java:46)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:949)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:973)
at java.lang.Thread.run(Thread.java:767)
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
....
....
Caused by: com.ibm.jsse2.util.h: No trusted certificate found
at com.ibm.jsse2.util.g.a(g.java:35)
at com.ibm.jsse2.util.g.b(g.java:74)
at com.ibm.jsse2.util.e.a(e.java:22)
at com.ibm.jsse2.pc.a(pc.java:51)
at com.ibm.jsse2.pc.a(pc.java:18)
at com.ibm.jsse2.pc.b(pc.java:99)
at com.ibm.jsse2.jb.a(jb.java:70)


We received similar issues for Linux/Windows servers and in those scenarios, we imported our self-signed certificate into Agent JRE (<Agent_Dir>/jre/lib/security/cacerts) however the same case is not applicable for AIX since I don't find the path available. Hence, I imported self-signed certificate into default java path (<JAVA_Dir>/jre/lib/security) but still error is recurring

Can you please suggest how to resolve this issue?

Thanks

[Gregg Stewart]

Hi Parthiban, 

Is this different from the following thread: 

https://community.broadcom.com/enterprisesoftware/communities/community-home/digestviewer/viewquestion?ContributedContentKey=955becdf-427d-418a-9fc0-3fbbec19680c&CommunityKey=81532ad3-5cf2-46cd-ab04-c851a8852960&tab=digestviewer

Kind regards,

Gregg

[Parthiban SG]

@Gregg Stewart

That explains... Thanks for the overall picture on the issue breakdown Gregg :)

[Gregg Stewart]

You're welcome. Glad I could help. 

Best regards,

Gregg