Plc not working on ssl

ShashankJain

Hi All,

 

We are trying to run PLC on SSL. And we are getting the following error in server.log:-

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException

 

We have added all the necessary certificates and completed all the required steps as mentioned in the OD and LSCS documents.

 

Please provide inputs if anyboy has experienced the same issue.

 

 

 

LivesitePritam1

Hi,

 

Please check the following steps to see if you have set the SSL for teamsite and external task correctly :

 

1. openssl req -new > new_server.csr then answer all questions and record the answers

2. openssl rsa -in privkey.pem -out new_server.key

3. openssl x509 -in new_server.csr -out new_server.crt -req -signkey new_server.key -days 365

4. copy new_server.key to \iw-webd\conf\ssl.key

5. copy new_server.crt to \iw-webd\conf\ssl.crt

6. Modify line 1006 of \iw-webd\conf\iwwebd.conf.template to look something like this: SSLCertificateFile "C:\iw-home/iw-webd/conf/ssl.crt/new_server.crt"

7. Modify line 1014 of \iw-webd\conf\iwwebd.conf.template to look something like this: SSLCertificateKeyFile "C:\iw-home/iw-webd/conf/ssl.key/new_server.key"

8. /bin/iwreset -ui or

9. stop iwwebd service = net stop iwwebd

10. start iwwebd service = net start iwwebd then you should be able to log in (https:\\...) with your own certificate.

After generating the SSL certificates and getting them verified, you can implement them with cert_install.pl

NOTE: Running cert_install.pl will cause the entire Teamsite UI to break. This is rectified by rebooting the actual server machine, which will cause the UI to work without issue again.

To force Teamsite to use https instead of http, please refer to the below KB article on redirecting requests from port 80 to port 443
https://customers.autonomy.com/support/secure/docs/FAQ/Interwoven/49698.html

To fix problems with externaltask after turning on SSL

As per the current question, please refer to this KB: http://support.interwoven.com/kb/kb_show_article2.asp?ArticleID=63445

1) Use http for localhost
in your redirect.conf.template use this configuration
RewriteCond %{REMOTE_ADDR} !(localhost|127.0.0.1)
RewriteCond %{SERVER_PORT} =__IWWEBD_HTTP_PORT__
RewriteRule (.*) https://__IWWEBD_HOST__$1 [R,L]
and run iwreset -a
This will make sure that if the request is from localhost, it will not use SSL . Now in your externaltask use the URL
http://localhost/iw-cc/urlexternaltask

2) Use port 8080 in URLExternatask
In your URLExternaltask use this URL
http://localhost:8080/iw-cc/urlexternaltask

If you are getting cert problems after this make sure to check the certs on your SSL certificates.