This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal


Mar 26, 2013, 10:25 AM
12 Posts
topic has been resolvedResolved

iNotes and Connections Files - hanshake error

  • Category: iNotes
  • Platform: All Platforms
  • Release: 9.0
  • Role: Administrator
  • Tags: inotes,connections
  • Replies: 1

 

Hello all

when we was in Public Beta i had configured iNotes integration with Connections Files and all worked fine.

My environment is configured all in https so i had imported one SSL intermediate certificates in Domino JVM that was missing

/opt/ibm/lotus/notes/latest/linux/jvm/bin/keytool -import -trustcacerts -alias nomealias -file certificato.cer -keystore cacerts 

 

When GA comes out , i've uninstalled the beta ,and make a fresh install ,

after that i've tried to add the SSL certificate was missing in publicbeta but now is present (RapidSSLCA) with alias secintgeo  but if i try to attach a file from Connections FILES  i get following error in iNotes Console

WCAN9.0_20130309.0942
 
03/26/2013 10:31:20AM A problem has occurred which may have caused the current operation to fail.
03/26/2013 10:31:20AM status=500: { "error": {"@code":"1000","param" : [ {"@name":"exception","value" : "javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: 3659"} ],"details" : ""}}

 

On Domino Console

03/26/2013 11:13:06   HTTP JVM: java.security.cert.CertificateException: 3659. For more detailed information, please consult error-log-0.xml located in /local/notesdata/domino/workspace/logs

And on logs

 

<CommonBaseEvent creationTime="2013-03-22T14:09:26.358+01:00" globalInstanceId="EL0a150a2c00013d921e95e70000005f" msg="Certificate with subject CN=*.factor-y.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)11, OU=GT63413847, O=*.factor-y.com, C=IT, SERIALNUMBER=Kb50UMYAfyo2dlnJ5Mzvj4H9iL8ml5df, issued by CN=RapidSSL CA, O=&quot;GeoTrust, Inc.&quot;, C=US, is not trusted. Validation failed with error 3659." severity="30" version="1.0.1">
<extendedDataElements name="CommonBaseEventLogRecord:level" type="noValue">
<children name="CommonBaseEventLogRecord:name" type="string"> 
<values>WARNING</values>
</children>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:sourceClassName" type="string">
<values>com.ibm.domino.napi.ssl.DominoX509TrustManager</values>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:sourceMethodName" type="string">
<values>checkServerTrusted</values>
</extendedDataElements>
<sourceComponentId component="Expeditor 6.2" componentIdType="ProductName" instanceId="" location="deathstar" locationType="Hostname" subComponent="com.ibm.domino.napi.ssl" threadId="6" componentType="http://www.w3.org/2001/XMLSchema-instance"/>
<situation categoryName="ReportSituation">
<situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ReportSituation" reasoningScope="INTERNAL" reportCategory="LOG"/>
</situation>
</CommonBaseEvent></CommonBaseEvents>
<CommonBaseEvent creationTime="2013-03-22T14:09:26.360+01:00" globalInstanceId="EL0a150a2c00013d921e95e700000061" msg="java.security.cert.CertificateException: 3659" severity="50" version="1.0.1">
<extendedDataElements name="CommonBaseEventLogRecord:level" type="noValue">
<children name="CommonBaseEventLogRecord:name" type="string"> 
<values>SEVERE</values>
</children>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:sourceClassName" type="string">
<values>com.ibm.commons.log.AbstractLogMgr</values>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:sourceMethodName" type="string">
<values>log</values>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:Exception" type="string">
<values>javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: 3659&#xA;&#x9;at com.ibm.jsse2.o.a(o.java:15)&#xA;&#x9;at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:460)&#xA;&#x9;at com.ibm.jsse2.kb.a(kb.java:294)&#xA;&#x9;at com.ibm.jsse2.kb.a(kb.java:533)&#xA;&#x9;at com.ibm.jsse2.lb.a(lb.java:55)&#xA;&#x9;at com.ibm.jsse2.lb.a(lb.java:581)&#xA;&#x9;at com.ibm.jsse2.kb.s(kb.java:11)&#xA;&#x9;at com.ibm.jsse2.kb.a(kb.java:394)&#xA;&#x9;at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:44)&#xA;&#x9;at com.ibm.jsse2.SSLSocketImpl.h(SSLSocketImpl.java:496)&#xA;&#x9;at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:333)&#xA;&#x9;at com.ibm.jsse2.k.write(k.java:21)&#xA;&#x9;at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:76)&#xA;&#x9;at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:134)&#xA;&#x9;at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:827)&#xA;&#x9;at org.apache.commons.httpclient.MultiThreadedHttpCon</values>
<values>nectionManager$HttpConnectionAdapter.flushRequestOutputStream(MultiThreadedHttpConnectionManager.java:1525)&#xA;&#x9;at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1975)&#xA;&#x9;at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:993)&#xA;&#x9;at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:397)&#xA;&#x9;at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)&#xA;&#x9;at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)&#xA;&#x9;at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:324)&#xA;&#x9;at com.ibm.domino.servlets.proxy.BasicProxy.executeMethod(BasicProxy.java:641)&#xA;&#x9;at com.ibm.domino.servlets.proxy.BasicProxy.doGet(BasicProxy.java:128)&#xA;&#x9;at com.ibm.domino.servlets.proxy.BasicProxy.service(BasicProxy.java:363)&#xA;&#x9;at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)&#xA;&#x9;at org.eclip</values>
<values>se.equinox.http.registry.internal.ServletManager$ServletWrapper.service(ServletManager.java:180)&#xA;&#x9;at org.eclipse.equinox.http.servlet.internal.ServletRegistration.handleRequest(ServletRegistration.java:90)&#xA;&#x9;at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:111)&#xA;&#x9;at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:67)&#xA;&#x9;at javax.servlet.http.HttpServlet.service(HttpServlet.java:806)&#xA;&#x9;at com.ibm.domino.xsp.adapter.osgi.OSGIModule.invokeServlet(OSGIModule.java:165)&#xA;&#x9;at com.ibm.domino.xsp.adapter.osgi.OSGIModule.access$0(OSGIModule.java:151)&#xA;&#x9;at com.ibm.domino.xsp.adapter.osgi.OSGIModule$1.invokeServlet(OSGIModule.java:132)&#xA;&#x9;at com.ibm.domino.xsp.adapter.osgi.AbstractOSGIModule.invokeServletWithNotesContext(AbstractOSGIModule.java:179)&#xA;&#x9;at com.ibm.domino.xsp.adapter.osgi.OSGIModule.doService(OSGIModule.java:126)&#xA;&#x9;at com.ibm.domino.xsp.adapter.osgi.OSGIService.doServi</values>
<values>ce(OSGIService.java:415)&#xA;&#x9;at com.ibm.designer.runtime.domino.adapter.LCDEnvironment.doService(LCDEnvironment.java:350)&#xA;&#x9;at com.ibm.designer.runtime.domino.adapter.LCDEnvironment.service(LCDEnvironment.java:306)&#xA;&#x9;at com.ibm.domino.xsp.bridge.http.engine.XspCmdManager.service(XspCmdManager.java:272)&#xA;Caused by: java.security.cert.CertificateException: 3659&#xA;&#x9;at com.ibm.domino.napi.ssl.DominoX509TrustManager.checkServerTrusted(DominoX509TrustManager.java:98)&#xA;&#x9;at com.ibm.jsse2.lb.a(lb.java:468)&#xA;&#x9;... 35 more&#xA;</values>
</extendedDataElements>
<sourceComponentId component="Expeditor 6.2" componentIdType="ProductName" instanceId="" location="deathstar" locationType="Hostname" subComponent="" threadId="6" componentType="http://www.w3.org/2001/XMLSchema-instance"/>
<situation categoryName="ReportSituation">
<situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ReportSituation" reasoningScope="INTERNAL" reportCategory="LOG"/>
</situation>
</CommonBaseEvent></CommonBaseEvents>
<CommonBaseEvent creationTime="2013-03-22T14:24:41.065+01:00" globalInstanceId="EL0a150a2c00013d921e95e700000063" msg="Certificate with subject CN=*.factor-y.com, OU=Domain Control Validated - RapidSSL(R), OU=See www.rapidssl.com/resources/cps (c)11, OU=GT63413847, O=*.factor-y.com, C=IT, SERIALNUMBER=Kb50UMYAfyo2dlnJ5Mzvj4H9iL8ml5df, issued by CN=RapidSSL CA, O=&quot;GeoTrust, Inc.&quot;, C=US, is not trusted. Validation failed with error 3659." severity="30" version="1.0.1">
<extendedDataElements name="CommonBaseEventLogRecord:level" type="noValue">
<children name="CommonBaseEventLogRecord:name" type="string"> 
<values>WARNING</values>
</children>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:sourceClassName" type="string">
<values>com.ibm.domino.napi.ssl.DominoX509TrustManager</values>
</extendedDataElements>
<extendedDataElements name="CommonBaseEventLogRecord:sourceMethodName" type="string">
<values>checkServerTrusted</values>
</extendedDataElements>
<sourceComponentId component="Expeditor 6.2" componentIdType="ProductName" instanceId="" location="deathstar" locationType="Hostname" subComponent="com.ibm.domino.napi.ssl" threadId="1" componentType="http://www.w3.org/2001/XMLSchema-instance"/>
<situation categoryName="ReportSituation">
<situationType xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="ReportSituation" reasoningScope="INTERNAL" reportCategory="LOG"/>
</situation>
</CommonBaseEvent></CommonBaseEvents>

 

 

any help ?

Mar 28, 2013, 5:57 PM
12 Posts
RE: iNotes and Connections Files - hanshake error

solved by myself using ikeman instead bashcommand


This forum is closed to new posts and responses. Individual names altered for privacy purposes. The information contained in this website is provided for informational purposes only and should not be construed as a forum for customer support requests. Any customer support requests should be directed to the official HCL customer support channels below:

HCL Software Customer Support Portal for U.S. Federal Government clients
HCL Software Customer Support Portal