<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <title>Certificate error using AXL Service</title>
  <link rel="alternate" href="http://developer.cisco.com/c/message_boards/find_thread?p_l_id=&amp;threadId=10812259" />
  <subtitle>Certificate error using AXL Service</subtitle>
  <id>http://developer.cisco.com/c/message_boards/find_thread?p_l_id=&amp;threadId=10812259</id>
  <updated>2013-05-22T04:48:25Z</updated>
  <dc:date>2013-05-22T04:48:25Z</dc:date>
  <entry>
    <title>RE: Certificate error using AXL Service</title>
    <link rel="alternate" href="http://developer.cisco.com/c/message_boards/find_message?p_l_id=&amp;messageId=11077825" />
    <author>
      <name>Komalkumar Tagdiwala</name>
    </author>
    <id>http://developer.cisco.com/c/message_boards/find_message?p_l_id=&amp;messageId=11077825</id>
    <updated>2013-01-24T04:47:20Z</updated>
    <published>2013-01-24T04:47:20Z</published>
    <summary type="html">I ended up deleting the jssecacerts and using the InstallCert utility (researched on the Internet).

While this problem has been resolved, I am now running into 401 (Unauthorized) error with the certificate. It is sad to see that the instructions on developer.cisco.com do not provide enough instructions to deal with such a common problems.
[quote=Komalkumar Tagdiwala]I am new to AXL development and followed all the steps outlined on http://developer.cisco.com/web/axl-developer/axl-java-sample-application to build the sample application. I also double-checked to ensure that the AXL Service is activated and appropriate user groups, roles and permissions added. I exported the SSL certificate from the AXL url https://mycucmhost:8443/axl/ and added it to my keystore using the keytool command. I then confirmed using keytool -list command to ensure that the certifcate shows up in the keystore. However, when I attempt to run the AXL Demo application, I keep getting the certificate error shown below: [color=#ff0000]Jan 17, 2013 5:14:13 PM com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser parseWSDL[/color] [color=#ff0000]WARNING: [failed to localize] wsdl.import.should.be.wsdl(file:/C:/eclipse_current/workspace/cucm-poc/schema/current/AXLSoap.xsd)[/color] [color=#ff0000]Exception in thread "main" com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.http.client.HttpClientTransport.getOutput(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.Stub.process(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(Unknown Source)[/color] [color=#ff0000]    at $Proxy33.getPhone(Unknown Source)[/color] [color=#ff0000]    at com.cisco.axl.demo.Demo.getPhone(Demo.java:158)[/color] [color=#ff0000]    at com.cisco.axl.demo.Demo.getPhoneInfo(Demo.java:126)[/color] [color=#ff0000]    at com.cisco.axl.demo.Demo.main(Demo.java:102)[/color] [color=#ff0000]Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(Unknown Source)[/color] [color=#ff0000]    ... 17 more[/color] [color=#ff0000]Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at sun.security.validator.PKIXValidator.doBuild(Unknown Source)[/color] [color=#ff0000]    at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)[/color] [color=#ff0000]    at sun.security.validator.Validator.validate(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)[/color] [color=#ff0000]    ... 29 more[/color] [color=#ff0000]Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)[/color] [color=#ff0000]    at java.security.cert.CertPathBuilder.build(Unknown Source)[/color] [color=#ff0000]    ... 35 more[/color] [b]What might I be missing or doing wrong?[/b][/quote]</summary>
    <dc:creator>Komalkumar Tagdiwala</dc:creator>
    <dc:date>2013-01-24T04:47:20Z</dc:date>
  </entry>
  <entry>
    <title>Certificate error using AXL Service</title>
    <link rel="alternate" href="http://developer.cisco.com/c/message_boards/find_message?p_l_id=&amp;messageId=10812258" />
    <author>
      <name>Komalkumar Tagdiwala</name>
    </author>
    <id>http://developer.cisco.com/c/message_boards/find_message?p_l_id=&amp;messageId=10812258</id>
    <updated>2013-01-18T01:20:42Z</updated>
    <published>2013-01-18T01:20:18Z</published>
    <summary type="html">I am new to AXL development and followed all the steps outlined on http://developer.cisco.com/web/axl-developer/axl-java-sample-application to build the sample application. I also double-checked to ensure that the AXL Service is activated and appropriate user groups, roles and permissions added. I exported the SSL certificate from the AXL url https://mycucmhost:8443/axl/ and added it to my keystore using the keytool command. I then confirmed using keytool -list command to ensure that the certifcate shows up in the keystore. However, when I attempt to run the AXL Demo application, I keep getting the certificate error shown below: [color=#ff0000]Jan 17, 2013 5:14:13 PM com.sun.xml.internal.ws.wsdl.parser.RuntimeWSDLParser parseWSDL[/color] [color=#ff0000]WARNING: [failed to localize] wsdl.import.should.be.wsdl(file:/C:/eclipse_current/workspace/cucm-poc/schema/current/AXLSoap.xsd)[/color] [color=#ff0000]Exception in thread "main" com.sun.xml.internal.ws.client.ClientTransportException: HTTP transport error: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.http.client.HttpClientTransport.getOutput(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.process(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.http.client.HttpTransportPipe.processRequest(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.transport.DeferredTransportPipe.processRequest(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber.__doRun(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber._doRun(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber.doRun(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.api.pipe.Fiber.runSync(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.Stub.process(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SEIStub.doProcess(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SyncMethodHandler.invoke(Unknown Source)[/color] [color=#ff0000]    at com.sun.xml.internal.ws.client.sei.SEIStub.invoke(Unknown Source)[/color] [color=#ff0000]    at $Proxy33.getPhone(Unknown Source)[/color] [color=#ff0000]    at com.cisco.axl.demo.Demo.getPhone(Demo.java:158)[/color] [color=#ff0000]    at com.cisco.axl.demo.Demo.getPhoneInfo(Demo.java:126)[/color] [color=#ff0000]    at com.cisco.axl.demo.Demo.main(Demo.java:102)[/color] [color=#ff0000]Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(Unknown Source)[/color] [color=#ff0000]    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(Unknown Source)[/color] [color=#ff0000]    ... 17 more[/color] [color=#ff0000]Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at sun.security.validator.PKIXValidator.doBuild(Unknown Source)[/color] [color=#ff0000]    at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)[/color] [color=#ff0000]    at sun.security.validator.Validator.validate(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)[/color] [color=#ff0000]    at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)[/color] [color=#ff0000]    ... 29 more[/color] [color=#ff0000]Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target[/color] [color=#ff0000]    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(Unknown Source)[/color] [color=#ff0000]    at java.security.cert.CertPathBuilder.build(Unknown Source)[/color] [color=#ff0000]    ... 35 more[/color] [b]What might I be missing or doing wrong?[/b]</summary>
    <dc:creator>Komalkumar Tagdiwala</dc:creator>
    <dc:date>2013-01-18T01:20:18Z</dc:date>
  </entry>
</feed>

