Hi, I found that the issue was the self-signed certificates of AAI SSL https server, which are not trusted by SDNC Java.
I was able to solve this issue by exporting the self-signed certficates from AAI:8443, and importing the certficates into SDNC Java keystore : keytool -importcert -file ~/aai.crt -alias aai.api.simpledemo.openecomp.org -keystore /usr/lib/jvm/java-8-openjdk-amd64/jre/lib/security/cacerts -storepass changeit Abdelmuhaimen Seaudi, CCIE # 25265 Email: [email protected] Skype: aseaudi LinkedIn: www.linkedin.com/in/aseaudi Telephone: +2012 84644 733 On Fri, Oct 20, 2017 at 10:36 AM, Abdelmuhaimen Seaudi <[email protected]> wrote: > Hi, > > If I try to create a new customer in AAI via DGBuilder, I get the > following error. > What does "unable to find valid certification path to the requested > target" mean ? > > 2017-10-20 08:33:24,088 | INFO | tp322478290-1567 | sliapiProvider > | 299 - org.onap.ccsdk.sli.core.sliapi-provider - > 0.1.2.SNAPSHOT | Calling directed graph for test/test/sync > 2017-10-20 08:33:24,090 | INFO | tp322478290-1567 | SvcLogicServiceImpl > | 295 - org.onap.ccsdk.sli.core.sli-provider - 0.1.2.SNAPSHOT > | Fetching service logic from data store > 2017-10-20 08:33:24,093 | INFO | tp322478290-1567 | SvcLogicServiceImpl > | 295 - org.onap.ccsdk.sli.core.sli-provider - 0.1.2.SNAPSHOT > | About to execute graph SvcLogicGraph [module=test, rpc=test, mode=sync, > version=0.1] > 2017-10-20 08:33:24,093 | INFO | tp322478290-1567 | SvcLogicServiceImpl > | 295 - org.onap.ccsdk.sli.core.sli-provider - 0.1.2.SNAPSHOT > | About to execute node # 1 (block) > 2017-10-20 08:33:24,105 | INFO | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | Input - > global-customer-id : 123 > 2017-10-20 08:33:24,108 | INFO | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | A&AI > transaction : > 2017-10-20 08:33:24,108 | INFO | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | Request > Time : 2017-10-20T08:33:24.106Z, Method : PUT > 2017-10-20 08:33:24,108 | INFO | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | Request > URL : https://aai.api.simpledemo.openecomp.org:8443/aai/v11/ > business/customers/customer/123 > 2017-10-20 08:33:24,114 | INFO | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | Missing > requestID. Assigned eb8bc791-3d5b-4417-a508-092b856b11c9 > 2017-10-20 08:33:24,127 | INFO | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | Input - > data : {"global-customer-id":"123","subscriber-name":"ABC123"," > subscriber-type":"Customer"} > 2017-10-20 08:33:24,180 | WARN | tp322478290-1567 | AAIService > | 300 - org.openecomp.sdnc.sli.aai - 0.1.0.SNAPSHOT | > AAIRequestExecutor.post > javax.net.ssl.SSLHandshakeException: > sun.security.validator.ValidatorException: > PKIX path building failed: > sun.security.provider.certpath.SunCertPathBuilderException: > unable to find valid certification path to requested target > > Abdelmuhaimen Seaudi, CCIE # 25265 > Email: [email protected] > Skype: aseaudi > LinkedIn: www.linkedin.com/in/aseaudi > Telephone: +2012 84644 733 > >
_______________________________________________ onap-discuss mailing list [email protected] https://lists.onap.org/mailman/listinfo/onap-discuss
