Secure Socket Layer (SSL) errors on Documentation - V2

SSL Errors - Alias name does not identify a key entry

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

When you are setting up SSL and this message appears in the log (where xxx is the alias you have setup):

Alias name [xxxx] does not identify a key entry

Example of log:

Caused by: java.lang.IllegalArgumentException: Alias name [cast] does not identify a key entry

at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:107) ~[tomcat-embed-core-9.0.63.jar!/:na]

at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:71) ~[tomcat-embed-core-9.0.63.jar!/:na]

at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:234) ~[tomcat-embed-core-9.0.63.jar!/:na]

at org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1227) ~[tomcat-embed-core-9.0.63.jar!/:na]

at org.apache.tomcat.util.net.AbstractEndpoint.start(AbstractEndpoint.java:1313) ~[tomcat-embed-core-9.0.63.jar!/:na]

at org.apache.coyote.AbstractProtocol.start(AbstractProtocol.java:614) ~[tomcat-embed-core-9.0.63.jar!/:na]

at org.apache.catalina.connector.Connector.startInternal(Connector.java:1072) ~[tomcat-embed-core-9.0.63.jar!/:na]

Then please follow the below solution.

SSL Errors - Cannot provide secure connection

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

If you are trying to connect to a CAST Product outside of the CAST server and get the error when trying to connect:

Cannot provide secure connection

It may look something like this:

Observed in CAST AIP

Release	Yes/No
8.3.x	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step scenario

Encountered error in browser.

Action Plan

The issue normally occurs because the organization requires SSL traffic to be done when communicating between servers, so the CAST product needs to be setup for SSL.

SSL Errors - curl - Peer Certificate issuer is not recognized

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

When trying to use a curl command to test connectivity to a web site, the following is returned:

curl: (60) Peer’s Certificate issuer is not recognized.

Observed in CAST AIP

Release	Yes/No
Highlight	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	N/A

Step by Step scenario

Encountered while running curl

Action Plan

The issue normally occurs due to not having the proper certificates in place for curl to run.

SSL Errors - PXIX path building failed - How to import certificate into JRE/JDK

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

When the error ‘unable to find valid certification path to requested target’ is seen, it normally indicates that either:

The certificate of the URL accessed is not present in the JRE/JDK. So import the certificate into JRE/JDK following the steps described in this page.
The incorrect JRE/JDK is being used. See below for some pointers for this case

The error can be seen in the log.

The error stack is shown below -

SSL Errors - sslv3 alert handshake failure - SSL alert number 40

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

When setting up imaging, the following is seen in the nginx error logs:

SSL: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:SSL alert number 40

To find the Logs please refer CAST Management Studio - Information - How to find logs

Observed in CAST AIP

Release	Yes/No
Imaging	✅

Observed on RDBMS

RDBMS	Yes/No
CSS	✅

Step by Step scenario

Encountered error in log.

Action Plan

The issue is normally due to either certificate issues and/or configuration issues.

SSL Errors - Unable to get local issuer certificate

Mon, 01 Jan 0001 00:00:00 +0000

Purpose (problem description)

When the error ‘Unable to get local issuer certificate’ is seen, it normally indicates one of the following:

The certificate of the URL accessed is not present in the JRE/JDK keystore.
The incorrect JRE/JDK is being used.
The configuration is pointing to the wrong keystore.

The error can be seen in the log.

Sample log is shows below:

To find the AIP Logs please refer CAST Management Studio - Information - How to find logs