Hi All,

I am tying to configure on-premises integration server to connect to webMethods integration cloud but its failing with below error.
What could be the possible reason for this error? Any help will be much appreciated.

The following error occurred while saving settings: com.wm.app.b2b.server.ServiceException: java.io.IOException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

com.wm.app.b2b.server.ServiceException: The following error occurred while saving settings: com.wm.app.b2b.server.ServiceException: java.io.IOException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. See the error log for the full stack trace.
at wm.client.integrationlive.account.updateAccountInfo(account.java:139)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at com.wm.app.b2b.server.JavaService.baseInvoke(JavaService.java:404)
at com.wm.app.b2b.server.invoke.InvokeManager.process(InvokeManager.java:646)
at com.softwareag.wx.is.interceptor.WxInterceptor.invokeNextInChain(WxInterceptor.java:238)
at com.softwareag.wx.is.interceptor.WxInterceptor.process(WxInterceptor.java:126)
at com.wm.app.b2b.server.util.tspace.ReservationProcessor.process(ReservationProcessor.java:39)
at com.wm.app.b2b.server.invoke.StatisticsProcessor.process(StatisticsProcessor.java:49)
at com.wm.app.b2b.server.invoke.ServiceCompletionImpl.process(ServiceCompletionImpl.java:243)
at com.wm.app.b2b.server.invoke.ValidateProcessor.process(ValidateProcessor.java:49)
at com.wm.app.b2b.server.invoke.PipelineProcessor.process(PipelineProcessor.java:171)
at com.wm.app.b2b.server.ACLManager.process(ACLManager.java:299)
at com.wm.app.b2b.server.invoke.DispatchProcessor.process(DispatchProcessor.java:34)
at com.wm.app.b2b.server.AuditLogManager.process(AuditLogManager.java:377)
at com.wm.app.b2b.server.invoke.InvokeManager.invoke(InvokeManager.java:545)
at com.wm.app.b2b.server.invoke.InvokeManager.invoke(InvokeManager.java:382)
at com.wm.app.b2b.server.Service…

Regards,
Jigs

Hi Jignesh,

the issue could be because of latest certificate missing to connect Integration Cloud.

Can you please mention the IS version and Fix level ?
Make sure you install latest IS core and WmCloud Fixes and try again.

thanks,
Siddu

Hi Jignesh,

please download the CA certificate chain for the Integration Cloud site and put them in a JKS-Truststore file.

Configure this JKS-file in on premise IntegrationServer IS Admin UI under Security → Keystores as a truststore and the define this truststore in Security → Certificates as the Truststore Alias.
Restart on premise IS and check again.

Regards,
Holger

Thanks Holger.

Do you mean download CA certificate chain for the Integration Cloud site from Profile\My Profile\My Certificate?

Regards,
Jigs

Hi Jignesh,

TrustStore file ‘wmcloud_truststore.jks’ located at C:\SoftwareAG\IntegrationServer\instances\default\packages\WmCloud\config should have CA certificates.

You can get latest from applying WmCloud Fix.

Regards,
Siddu

Hi Jignesh,

when you enter the cloud url in a browser and then click on the lock symbol you can introspect and download the CA certificates from there. The Root CA should already be part of the JVM´s central truststore cacerts.

The wmcloud_truststore mentioned by Siddu should already be configured automatically under Security → Keystores.

Regards,
Holger

Thanks Holger.

I am able to configure connection from on-premise IS to Integration Cloud.

Regards,
Jigs