After upgrading IQService issue TLS connection

pkumar22 · May 30, 2023, 2:42am

We have upgraded IQService getting the below error, and the screenshot attached Upgrade Service is Stopped, but in the services, I can see all three services are running.

Before the upgrade, it was running with TLS connections.

05/29/2023 17:25:44 : UpgradeServiceClient [ Thread-8 ] ERROR : “Certificate error: RemoteCertificateChainErrors”
05/29/2023 17:25:44 : UpgradeServiceClient [ Thread-8 ] ERROR : “An Exception occurred while accepting new client request :An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:25:44 : UpgradeServiceClient [ Thread-8 ] ERROR : “Authentication failed - closing the connection.”
05/29/2023 17:25:44 : RpcServer [ Thread-8 ] ERROR : “Error occurred while checking the availaility of newer version :: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:25:45 : UpgradeServiceClient [ Thread-8 ] ERROR : “Certificate error: RemoteCertificateChainErrors”
05/29/2023 17:25:45 : UpgradeServiceClient [ Thread-8 ] ERROR : “An Exception occurred while accepting new client request :An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:25:45 : UpgradeServiceClient [ Thread-8 ] ERROR : “Authentication failed - closing the connection.”
05/29/2023 17:25:45 : RpcServer [ Thread-8 ] ERROR : “Caught exception while notifying upgrade status: System.Exception: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor() —> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
— End of inner exception stack trace —
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
at RPCServer.rpcserver.UpgradeServiceClient.Execute(RpcRequest request)
at sailpoint.rpcserver.RpcServer.NotifyUpgradeStatus(String operation, String status, Exception ex, ArrayList stepsPerformed), The exception occurred for operation : upgrade and status being reported was : declined, steps performed till now : System.Collections.ArrayList, Exception being reported was : No Error Reported”
05/29/2023 17:25:45 : RpcServer [ Thread-8 ] ERROR : “Error while upgrade check: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Net.Security.SslStream.AuthenticateAsClient(String targetHost, X509CertificateCollection clientCertificates, Boolean checkCertificateRevocation)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”
05/29/2023 17:26:24 : RpcHandler [ Thread-5 ] ERROR : “Malformed request received from client - 172.19.66.20:51412. Received header length as - Error in parsing - Input string was not in a correct format.”
05/29/2023 17:26:31 : RpcHandler [ Thread-4 ] ERROR : “Malformed request received from client - 172.19.66.20:51440. Received header length as - Error in parsing - Input string was not in a correct format.”

RAKGDS · June 20, 2023, 2:32pm

Hi Prasantha,
Did you try to restart the IQService after the upgrade ? Are you still facing the issue ?

Thanks
Rakesh Bhati

Remold · June 20, 2023, 9:02pm

This looks like a SSL certificate issue.

The certificate of the IQService must be added to the truststores of the IIQ Servers.
Take a look to the following link for re-setup TLS for IQService.
https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273

If this does not help, please reply to this thread and we can help further. I (and others) have setup IQService with TLS many times

Remold

pkumar22 · June 20, 2023, 10:17pm

the link is giving the below message.

An invalid set of parameters has been specified in the url.

Return to my original page

Remold · June 21, 2023, 5:36am

Sorry, pasted the link twice

https://community.sailpoint.com/t5/IdentityIQ-Connectors/IQService-TLS-and-Client-Authentication-Configuration/ta-p/75273

sauvee · June 21, 2023, 9:20am

I do believe this is concerning IdentityNow, in which case the certificate files (crt, cer) need to be copied on the Virtual Appliance under /home/sailpoint/certificates in order to be picked up by IdentityNow. Reboot the VA once you’ve copied the certs.

pkumar22 · June 21, 2023, 3:31pm

Added the Cert and rebooted the VA and when do test and it is reading correct cert, but still getting failed with below error.

Any idea please.

06/21/2023 09:27:17 : UpgradeServiceClient [ Thread-8 ] ERROR : “Authentication failed - closing the connection.”
06/21/2023 09:27:17 : RpcServer [ Thread-8 ] ERROR : “Caught exception while notifying upgrade status: System.Exception: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at RPCServer.rpcserver.UpgradeServiceClient…ctor() —> System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
— End of inner exception stack trace —
at RPCServer.rpcserver.UpgradeServiceClient…ctor()
at RPCServer.rpcserver.UpgradeServiceClient.Execute(RpcRequest request)
at sailpoint.rpcserver.RpcServer.NotifyUpgradeStatus(String operation, String status, Exception ex, ArrayList stepsPerformed), The exception occurred for operation : upgrade and status being reported was : declined, steps performed till now : System.Collections.ArrayList, Exception being reported was : No Error Reported”
06/21/2023 09:27:17 : RpcServer [ Thread-8 ] ERROR : “Error while upgrade check: An Exception occurred while accepting new client request: An Exception occurred while accepting new client request :System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at RPCServer.rpcserver.UpgradeServiceClient…ctor()”

has context menu

RAKGDS · June 22, 2023, 10:00am

Can you check this post ?

system · August 21, 2023, 10:01am

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Error Msg iqservice ISC Discussion and Questions identity-security-cloud , iqservice	5	252	December 16, 2024
Error in the IQ service logs ISC Discussion and Questions identity-security-cloud	3	1140	February 25, 2024
IIQ upgrade error 8.2p2 to 8.3 IIQ Discussion and Questions identityiq	5	1996	August 14, 2023
Enabling TLS in SailPoint IIQ Discussion and Questions identityiq , connectors	2	529	August 12, 2024
IIQ - AD - TLS Connection Failure IIQ Discussion and Questions	5	689	July 19, 2023

After upgrading IQService issue TLS connection

Related topics