Failed to access the WSDL at

Hello guys

I need your help with ELS10.5.

I can login to ELS on the Admin Client successfully. When I go to the Document Module, I get the error

System.Web.Services.Protocols.SoapException
Actor:
Code: ELService.Operation.GetAllTypesFailed
Lang:
Node:
Role:
Detail: <detail>
<ns2:ELServiceFault xmlns:ns2="urn:elib.services.ecm.opentext.com">
<faultCode>ELService.Operation.GetAllTypesFailed</faultCode>
<message>Getting all object types failed!</message>
<parameters>
<entry>
<key>EVENT_ID</key>
<value>Wed Nov 11 15:20:31 CAT 2015</value>
</entry>
<entry>
<key>CAUSE_MESSAGES</key>
<value>javax.xml.ws.WebServiceException: Failed to access the WSDL at: https://ctarchd01.engenoil.net:8443/otds-v2/services/authentication?wsdl. It failed with:
   sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.|javax.xml.ws.WebServiceException: Failed to access the WSDL at: https://ctarchd01.engenoil.net:8443/otds-v2/services/authentication?wsdl. It failed with:
   sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.|Failed to access the WSDL at: https://ctarchd01.engenoil.net:8443/otds-v2/services/authentication?wsdl. It failed with:
   sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.|sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target|PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target|unable to find valid certification path to requested target|</value>
</entry>
</parameters>
</ns2:ELServiceFault>
</detail>

Attached is the ot-elib.log and the screenshot of the error

Find more posts tagged with

Comments

eLink User

Hi Rhulani,

It looks as if the SSL certificate at ctarchd01.engenoil.net:8443 isn’t accepted by the Java, which is running your EL Tomcat.

I suggest you install a valid SSL certificate from a trusted authority on ctarchd01.engenoil.net:8443.

If this isn’t possible, try to fix this, by import the certificate into the \Java\jre\lib\security\cacerts keystore of the Java installation, that is running the Tomcat, where EL is installed.

Use the keytool provided in your Java installation.

Use the -importcert parameter, and specify -alias and -file and -keystore.

You can download the SSL certificate from ctarchd01.engenoil.net:8443 using a browser and export as PEM file (e.g. see http://superuser.com/questions/97201/how-to-save-a-remote-server-ssl-certificate-locally-as-a-file).

Kind regards

Andreas Probst

From: eLink Entry: Enterprise Library Services Forum [mailto:opentextenterpriselibraryservicesdiscussion@elinkkc.opentext.com]
Sent: Mittwoch, 11. November 2015 14:35
To: eLink Recipient
Subject: Failed to access the WSDL at

[Attachments exceeded pre-set size limits. Use the links provided to access]

Failed to access the WSDL at

Posted by Makhubele, Rhulani On 11/11/2015 08:30 AM

Hello guys

I need your help with ELS10.5.

I can login to ELS on the Admin Client successfully. When I go to the Document Module, I get the error

System.Web.Services.Protocols.SoapException
Actor:
Code: ELService.Operation.GetAllTypesFailed
Lang:
Node:
Role:
Detail: <detail>
<ns2:ELServiceFault xmlns:ns2="urn:elib.services.ecm.opentext.com">
<faultCode>ELService.Operation.GetAllTypesFailed</faultCode>
<message>Getting all object types failed!</message>
<parameters>
<entry>
<key>EVENT_ID</key>
<value>Wed Nov 11 15:20:31 CAT 2015</value>
</entry>
<entry>
<key>CAUSE_MESSAGES</key>
<value>javax.xml.ws.WebServiceException: Failed to access the WSDL at: https://ctarchd01.engenoil.net:8443/otds-v2/services/authentication?wsdl. It failed with:
   sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.|javax.xml.ws.WebServiceException: Failed to access the WSDL at:https://ctarchd01.engenoil.net:8443/otds-v2/services/authentication?wsdl. It failed with:
   sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.|Failed to access the WSDL at:https://ctarchd01.engenoil.net:8443/otds-v2/services/authentication?wsdl. It failed with:
   sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.|sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target|PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target|unable to find valid certification path to requested target|</value>
</entry>
</parameters>
</ns2:ELServiceFault>
</detail>

Attached is the ot-elib.log and the screenshot of the error

Attachment Links:

ot-elib.txt (160 KB)

ELS1.JPG (61 KB)

Rhulani Makhubele

Hello Andreas Probst

Thanks a lot for the assistance and apologies for a very late reply.

I did that procedure to import the certificate but the terror persists

C:\Program Files\Java\jre7\bin>keytool -importcert -alias ELib_Cert -file C:\Pr

ogramData\OpenText\Elib\certs\ELib.pem -keystore Elib.pem

Enter keystore password:

Re-enter new password:

Owner: CN=ELIB_CTARCHD01

Issuer: CN=ELIB_CTARCHD01

Serial number: 2a081

Valid from: Tue Nov 10 19:42:56 CAT 2015 until: Sun Nov 10 19:42:56 CAT 2115

Certificate fingerprints:

MD5: 11:9A:E2:18:20:FE:2A:2A:53:63:61:64:6F:7D:93:92

SHA1: 72:76:7B:87:F9:46:43:7C:E6:53:C3:CC:F1:69:56:B0:EA:DC:BA:5F

SHA256: 47:37:51:E8:14:9A:E0:99:1D:12:4F:DE:E6:FD:69:31:40:60:8D:7C:C8:

47:6E:92:7D:25:53:49:0A:D8:FB:2A

Signature algorithm name: SHA1withRSA

Version: 1

Trust this certificate? [no]: y

Certificate was added to keystore

What else can I do?

eLink User

You imported the wrong PEM file. The one you imported is the one, that’s used by EL to sign ArchiveLink URLs.

Please download the SSL certificate from ctarchd01.engenoil.net:8443 as PEM file, and install this one.

see http://superuser.com/questions/97201/how-to-save-a-remote-server-ssl-certificate-locally-as-a-file

Andreas

From: eLink Entry: Enterprise Library Services Forum [mailto:opentextenterpriselibraryservicesdiscussion@elinkkc.opentext.com]
Sent: Montag, 7. Dezember 2015 08:04
To: eLink Recipient
Subject: RE Failed to access the WSDL at

RE Failed to access the WSDL at

Posted by Makhubele, Rhulani On 12/07/2015 01:59 AM

Hello Andreas Probst

Thanks a lot for the assistance and apologies for a very late reply.

I did that procedure to import the certificate but the terror persists

C:\Program Files\Java\jre7\bin>keytool -importcert -alias ELib_Cert -file C:\Pr

ogramData\OpenText\Elib\certs\ELib.pem -keystore Elib.pem

Enter keystore password:

Re-enter new password:

Owner: CN=ELIB_CTARCHD01

Issuer: CN=ELIB_CTARCHD01

Serial number: 2a081

Valid from: Tue Nov 10 19:42:56 CAT 2015 until: Sun Nov 10 19:42:56 CAT 2115

Certificate fingerprints:

MD5: 11:9A:E2:18:20:FE:2A:2A:53:63:61:64:6F:7D:93:92

SHA1: 72:76:7B:87:F9:46:43:7C:E6:53:C3:CC:F1:69:56:B0:EA:DC:BA:5F

SHA256: 47:37:51:E8:14:9A:E0:99:1D:12:4F:DE:E6:FD:69:31:40:60:8D:7C:C8:

47:6E:92:7D:25:53:49:0A:D8:FB:2A

Signature algorithm name: SHA1withRSA

Version: 1

Trust this certificate? [no]: y

Certificate was added to keystore

What else can I do?

Rhulani Makhubele

Thanks Andreas

For some reason the Tomcat instance wasn’t reading the JSSECCACERTS file that supplements the CACERTS root certificate list. I’ve import the CTARCHD01 certificate into CACERTS in java security and its happy now J

Rhulani Makhubele
Senior EIM Consultant
EIM GT

T:
F:
C: +2782 3030 823
E: rmakhubele@datacentrix.co.za
www.datacentrix.co.za

Serious about performance,passionate about value

From: eLink Entry: Enterprise Library Services Forum [mailto:opentextenterpriselibraryservicesdiscussion@elinkkc.opentext.com]
Sent: 07 December 2015 11:38 AM
To: eLink Recipient <devnull@elinkkc.opentext.com>
Subject: RE Failed to access the WSDL at

RE Failed to access the WSDL at

Posted by eLink On 12/07/2015 04:37 AM

You imported the wrong PEM file. The one you imported is the one, that’s used by EL to sign ArchiveLink URLs.

Please download the SSL certificate from ctarchd01.engenoil.net:8443 as PEM file, and install this one.

see http://superuser.com/questions/97201/how-to-save-a-remote-server-ssl-certificate-locally-as-a-file

Andreas

RE Failed to access the WSDL at

Posted by Makhubele, Rhulani On 12/07/2015 01:59 AM

Hello Andreas Probst

Thanks a lot for the assistance and apologies for a very late reply.

I did that procedure to import the certificate but the terror persists

C:\Program Files\Java\jre7\bin>keytool -importcert -alias ELib_Cert -file C:\Pr

ogramData\OpenText\Elib\certs\ELib.pem -keystore Elib.pem

Enter keystore password:

Re-enter new password:

Owner: CN=ELIB_CTARCHD01

Issuer: CN=ELIB_CTARCHD01

Serial number: 2a081

Valid from: Tue Nov 10 19:42:56 CAT 2015 until: Sun Nov 10 19:42:56 CAT 2115

Certificate fingerprints:

MD5: 11:9A:E2:18:20:FE:2A:2A:53:63:61:64:6F:7D:93:92

SHA1: 72:76:7B:87:F9:46:43:7C:E6:53:C3:CC:F1:69:56:B0:EA:DC:BA:5F

SHA256: 47:37:51:E8:14:9A:E0:99:1D:12:4F:DE:E6:FD:69:31:40:60:8D:7C:C8:

47:6E:92:7D:25:53:49:0A:D8:FB:2A

Signature algorithm name: SHA1withRSA

Version: 1

Trust this certificate? [no]: y

Certificate was added to keystore

What else can I do?

[To post a comment, use the normal reply function]
Topic:	Failed to access the WSDL at
Forum:	Enterprise Library Services Forum
Content Server:	Knowledge Center

Disclaimer
Everything in this e-mail and any attachments relating to the official business of Datacentrix Holdings Ltd. and its subsidiaries ('Datacentrix') is proprietary to Datacentrix. It is confidential, legally privileged and protected by law. Datacentrix does not own and endorse any other content. Views and opinions are those of the sender unless clearly stated as being that of Datacentrix. The person addressed in the e-mail is the sole authorised recipient. Please notify the sender immediately if it has unintentionally reached you and do not read, disclose or use the content in any way. Datacentrix cannot assure that the integrity of this communication has been maintained nor that it is free of errors, virus, interception or interference.