Re: URI not found - https - SOLVED
Thanks Fred - This seems to have cleared most of the problems! We were able to load the WSDL now. Sue -Original Message- From: Barber, Sue Sent: Tuesday, October 02, 2012 3:53 PM To: arslist@ARSLIST.ORG Subject: RE: URI not found - https We were looking at this as well - we're going to load the certs locally and will let you know how it goes in the morning. Thanks for all the ideas so far! Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Grooms, Frederick W Sent: Tuesday, October 02, 2012 2:43 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https Someone on the list will correct me if I am wrong but, When you are loading a WSDL into Developer Studio you are not using the server at all right then. Everything is being performed on your local machine so the certificate needs to be installed into the java you are using to run DevStudio with as well as on the server so it can be used in the filter call. Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 1:17 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** OK, he verified the certificate path and it is the one he updated on Friday, so the certificate that was updated was in the correct path? Attempting to load the wsdl again and same messages. Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Tuesday, October 02, 2012 1:47 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Thanks for the -Dpname trick! Jason -Original Message- On Tue, Oct 2, 2012 at 9:51 AM, Axton wrote: ** It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x60084001480 0t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams -Original Message- On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue wrote: ** Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 10:04 AM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Based on the stack trace, your JVM
Re: URI not found - https - SOLVED
Axton too - thank you! -Original Message- From: Barber, Sue Sent: Wednesday, October 10, 2012 2:22 PM To: 'arslist@ARSLIST.ORG' Subject: RE: URI not found - https - SOLVED Thanks Fred - This seems to have cleared most of the problems! We were able to load the WSDL now. Sue -Original Message- From: Barber, Sue Sent: Tuesday, October 02, 2012 3:53 PM To: arslist@ARSLIST.ORG Subject: RE: URI not found - https We were looking at this as well - we're going to load the certs locally and will let you know how it goes in the morning. Thanks for all the ideas so far! Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Grooms, Frederick W Sent: Tuesday, October 02, 2012 2:43 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https Someone on the list will correct me if I am wrong but, When you are loading a WSDL into Developer Studio you are not using the server at all right then. Everything is being performed on your local machine so the certificate needs to be installed into the java you are using to run DevStudio with as well as on the server so it can be used in the filter call. Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 1:17 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** OK, he verified the certificate path and it is the one he updated on Friday, so the certificate that was updated was in the correct path? Attempting to load the wsdl again and same messages. Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Tuesday, October 02, 2012 1:47 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Thanks for the -Dpname trick! Jason -Original Message- On Tue, Oct 2, 2012 at 9:51 AM, Axton wrote: ** It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x60084001480 0t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams -Original Message- On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue wrote: ** Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue -Original Message- From: Action Request System discussion list(ARSList
URI not found - https
Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle DB 11.2 ERROR: URI not found https://xxx.svc?wsdl Additional Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target com.bmc.arsys.ws.util.ARWSException: URI not found https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl at com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176) at com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219) Thanks in advance, Sue Barber ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are
Re: URI not found - https
Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle DB 11.2 ERROR: URI not found https://xxx.svc?wsdl Additional Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target com.bmc.arsys.ws.util.ARWSException: URI not found https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl at com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176) at com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219) Thanks in advance, Sue Barber ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are
Re: URI not found - https
Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java keystore that contains the certificates and change the JVM configuration to use that keystore: http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html The second part of the issue seems to be that the url is not valid; hence the URI not found error. As Frederick suggested, check the URI in a browser. Axton Grams On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W frederick.w.gro...@xo.com wrote: Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto: arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle DB 11.2 ERROR: URI not found https://xxx.svc?wsdl Additional Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target com.bmc.arsys.ws.util.ARWSException: URI not found https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl at com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176) at com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219) Thanks in advance, Sue Barber ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are
Re: URI not found - https
Entering the URL into a browser works just fine. Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Grooms, Frederick W Sent: Tuesday, October 02, 2012 9:54 AM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle DB 11.2 ERROR: URI not found https://xxx.svc?wsdl Additional Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target com.bmc.arsys.ws.util.ARWSException: URI not found https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl at com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176) at com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219) Thanks in advance, Sue Barber ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are
Re: URI not found - https
Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 10:04 AM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java keystore that contains the certificates and change the JVM configuration to use that keystore: http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html The second part of the issue seems to be that the url is not valid; hence the URI not found error. As Frederick suggested, check the URI in a browser. Axton Grams On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W frederick.w.gro...@xo.commailto:frederick.w.gro...@xo.com wrote: Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle DB 11.2 ERROR: URI not found https://xxx.svc?wsdl Additional Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target com.bmc.arsys.ws.util.ARWSException: URI not found https://arscomp.dev.mitre.org/ArsToCompucom.svc?wsdl at com.bmc.arsys.ws.util.WsdlUtil.validateWSDL(WsdlUtil.java:176) at com.bmc.arsys.ws.util.WsdlUtil.newDocument(WsdlUtil.java:219) Thanks in advance, Sue Barber ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.orghttp://www.arslist.org attend wwrug12 www.wwrug12.comhttp://www.wwrug12.com ARSList: Where the Answers Are _attend WWRUG12 www.wwrug.comhttp://www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug12 www.wwrug12.com ARSList: Where the Answers Are
Re: URI not found - https
It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x600840014800t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue sbar...@mitre.org wrote: ** Hi Axton, ** ** In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? ** ** Thank you, Sue ** ** *From:* Action Request System discussion list(ARSList) [mailto: arslist@ARSLIST.ORG] *On Behalf Of *Axton *Sent:* Tuesday, October 02, 2012 10:04 AM *To:* arslist@ARSLIST.ORG *Subject:* Re: URI not found - https ** ** ** Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java keystore that contains the certificates and change the JVM configuration to use that keystore: http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html ** ** The second part of the issue seems to be that the url is not valid; hence the URI not found error. As Frederick suggested, check the URI in a browser. ** ** Axton Grams On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W frederick.w.gro...@xo.com wrote: Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto: arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle DB 11.2 ERROR: URI not found https://xxx.svc?wsdl Additional Details: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Re: URI not found - https
Thanks so much Axton - Having them check now! Sue From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 12:52 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x600840014800t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue sbar...@mitre.orgmailto:sbar...@mitre.org wrote: ** Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 10:04 AM To: arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java keystore that contains the certificates and change the JVM configuration to use that keystore: http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html The second part of the issue seems to be that the url is not valid; hence the URI not found error. As Frederick suggested, check the URI in a browser. Axton Grams On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W frederick.w.gro...@xo.commailto:frederick.w.gro...@xo.com wrote: Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following error as a https entry. I have reviewed previous posts on the issue and have found nothing that has fixed our issue, so I thought I would ask again if anyone has been able to resolve this issue or at least point me in the right direction. ARS Server is: 7.6.03 Build 001 Linux OS Oracle
Re: URI not found - https
OK, he verified the certificate path and it is the one he updated on Friday, so the certificate that was updated was in the correct path? Attempting to load the wsdl again and same messages. Sue From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Tuesday, October 02, 2012 1:47 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Thanks for the -Dpname trick! Jason On Tue, Oct 2, 2012 at 9:51 AM, Axton axton.gr...@gmail.commailto:axton.gr...@gmail.com wrote: ** It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x600840014800t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue sbar...@mitre.orgmailto:sbar...@mitre.org wrote: ** Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 10:04 AM To: arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java keystore that contains the certificates and change the JVM configuration to use that keystore: http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html The second part of the issue seems to be that the url is not valid; hence the URI not found error. As Frederick suggested, check the URI in a browser. Axton Grams On Tue, Oct 2, 2012 at 8:54 AM, Grooms, Frederick W frederick.w.gro...@xo.commailto:frederick.w.gro...@xo.com wrote: Sue, What happens when you try to open that same https WSDL url on a browser on your machine? Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 8:48 AM To: arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG Subject: URI not found - https ** Happy October! We are attempting to load a WSDL as a set fields action in a filter. It works if we use an http, but we get the following
Re: URI not found - https
Someone on the list will correct me if I am wrong but, When you are loading a WSDL into Developer Studio you are not using the server at all right then. Everything is being performed on your local machine so the certificate needs to be installed into the java you are using to run DevStudio with as well as on the server so it can be used in the filter call. Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 1:17 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** OK, he verified the certificate path and it is the one he updated on Friday, so the certificate that was updated was in the correct path? Attempting to load the wsdl again and same messages. Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Tuesday, October 02, 2012 1:47 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Thanks for the -Dpname trick! Jason -Original Message- On Tue, Oct 2, 2012 at 9:51 AM, Axton wrote: ** It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x60084001480 0t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams -Original Message- On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue wrote: ** Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 10:04 AM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java keystore that contains the certificates and change the JVM configuration to use that keystore: http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html The second part of the issue seems to be that the url is not valid; hence the URI not found error. As Frederick suggested, check the URI in a browser. Axton Grams -Original Message- On Tue, Oct 2, 2012 at 8:54 AM
Re: URI not found - https
We were looking at this as well - we're going to load the certs locally and will let you know how it goes in the morning. Thanks for all the ideas so far! Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Grooms, Frederick W Sent: Tuesday, October 02, 2012 2:43 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https Someone on the list will correct me if I am wrong but, When you are loading a WSDL into Developer Studio you are not using the server at all right then. Everything is being performed on your local machine so the certificate needs to be installed into the java you are using to run DevStudio with as well as on the server so it can be used in the filter call. Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Barber, Sue Sent: Tuesday, October 02, 2012 1:17 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** OK, he verified the certificate path and it is the one he updated on Friday, so the certificate that was updated was in the correct path? Attempting to load the wsdl again and same messages. Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Tuesday, October 02, 2012 1:47 PM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Thanks for the -Dpname trick! Jason -Original Message- On Tue, Oct 2, 2012 at 9:51 AM, Axton wrote: ** It's not a straight forward thing to do, but here is how I do it: 1. Identify the plugin server configuration file. It will contain the plugin entry for ARSYS.ARF.WEBSERVICE: plugin nameARSYS.ARF.WEBSERVICE/name pathelement type=location/path/to/ARSystem/pluginsvr/websvcjava75.jar/pathelement classnamecom.bmc.arsys.ws.plugin.WSPlugin/classname /plugin 2. Identify the port that the plugin server listens on (defined in the pluginsvr_config.xml): pluginsvr_config port4052/port ... 3. Find the process that the port is bound to: [user@server ~]$ lsof -u user |grep LISTEN |grep 4052 java 14599 user 11u IPv4 0x60084001480 0t0 TCP server:4052 (LISTEN) You now have several pieces of information: 1. The installation path for the correct plugin server 2. The configuration file for the correct plugin server 3. The PID of the currently running plugin server With this information you can identify the correct entry in armonitor.conf that you need to modify to add the java keystore parameters. This is a little off topic, but I have simplified the process by adding markers for each of the java processes. This makes identifying each process easy: [user@server ~]$ ps -fu user |grep java |grep -v grep user 14606 13861 0 Oct 01 ? 2:15 java -Dpname=PluginSvrAtrium -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14610 13861 0 Oct 01 ? 1:16 /path/to/remedy/apps/java/jre/bin/java -Dpname=License -server -Xms32m -Xmx64m user 14600 13861 0 Oct 01 ? 193:57 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. user 14605 13861 0 Oct 01 ? 3:12 java -Dpname=PluginSvrNE -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:MaxPerm user 14599 13861 0 Oct 01 ? 4:02 ./java -Dpname=PluginSvrMain -server -Xms128m -Xmx512m -XX:PermSize=32m -XX:Max user 14608 13861 0 Oct 01 ? 2:35 /path/to/remedy/apps/java/jre/bin/java -Dpname=Flashboards -server -Xms32M -Xm I added a -Dpname parameter to each of the java processes. The -D parameter let's you add arbitrary command line parameters to the java processes. Now, if I want to identify the email engine, I can find the PID like this: [user@server ~]$ ps -fu user |grep Email |grep -v grep user 14600 13861 0 Oct 01 ? 194:08 /path/to/remedy/apps/java/jre/bin/java -Dpname=Email -Xms350m -Xmx512m -Djava. Axton Grams -Original Message- On Tue, Oct 2, 2012 at 11:06 AM, Barber, Sue wrote: ** Hi Axton, In speaking to my network administrator, he said that they did note the certs were not current and he updated them based on what he believed the proper location was, but there are multiple other javas on the machine. Can you tell me how to determine which location we would need to ensure the certification is updated? Thank you, Sue -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Axton Sent: Tuesday, October 02, 2012 10:04 AM To: arslist@ARSLIST.ORG Subject: Re: URI not found - https ** Based on the stack trace, your JVM needs the certificates in the certification path. If you are calling out to a web service, then this applies to the JVM that the Java based plugin server uses. Get public parts of the certificates from the Root CA to the end node and create a java
