How to bypass SSLHandshakeException in Testing connection in Webservice Connector

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Dear Team,
I am using Delinea connector to connect with Delinea secret Server . when I am calling test connection function its throwing SSL handshake exception. Do we have any way to bypass/whitelist SSL communication in IDN connector to avoid current situation?.

I am getting below error message. Kindly suggest with possible way.

“Error while performing operation : Test Connection Error code : 0 javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”

2

Hi Vikas,

As the Web Service connector goes via your Virtual Appliances (VA’s) - you can copy the public certificate onto the VA, then restart the CCG, and it should then trust the certificate.

You should also copy across the root CA certificate and any intermediary ones too.

  1. Extract/Dowload the Delinea certificates. You can do this by pasting the URL in the browser and clicking the padlock icon then saving to file
  2. Save as PEM encoded format
  3. Copy the PEM-encoded certificates to the /home/sailpoint/certificates directory on the VA’s. This directory might not be empty because it’s where the VA adds any certs it gets.
  4. Restart CCG. eg sudo systemctl restart ccg
3

thanks for your response and guideline…apart from this way do we have any setting option from IDN UI end by which we can disabled/enabled SSL base communication if we are not interested to update certificate on VA side.

Kindly suggest if we have any thing around this.

4

Hi Vikar, your Web Service does have an HTTP call for testing purposes?

5

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.