topic Re: HTTP Template Testing Error in Splunk AppDynamics

HTTP Template Testing Error

CommunityUser — Thu, 30 Nov 2017 19:42:24 GMT

Howdy,

I am testing a variety of ways to react to health rule violations using HTTP Templates and requests. I've tried sending requests directly to Cisco Spark Message rooms without any problems.

However, when I tried a new HTTP Template to another webserver, I get the following failure and error when trying to test in on SAAS:

I tried the same request via an iOS app that I created as a test harness and it is working fine.

I'm wondering if it is because the webserver is using a certificate issued by "Lets Encrypt"?

Thanks

Tim

Re: HTTP Template Testing Error

CommunityUser — Thu, 30 Nov 2017 22:59:25 GMT

Hi Tim,

A quick search on this error brought me this thread on the community from just a few weeks ago - it seems the simplest thing to try.

https://community.appdynamics.com/t5/Java-Java-Agent-Installation-JVM/PKIX-path-building-failed/td-p/28396

If that doesn't work try:

Stack Overflow: https://stackoverflow.com/questions/9619030/resolving-javax-net-ssl-sslhandshakeexception-sun-security-validator-validatore

I also found this thread on Atlassian: https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html

Unfortunately it looks like there could be a number of use cases depending on your setup. Let me know if these helped you.

Re: HTTP Template Testing Error

CommunityUser — Fri, 01 Dec 2017 00:15:27 GMT

Hi Cody,

I will look into, but I think all of my testing is leading me to the conclusion that the SaaS controller doesn't have the Let's Encrypt Root CA and therefore unable to successfully create the tls connection.

What leads me to that conclusion is that I can connect and transact with that same nginx server via an iOS app, MacPaw REST app, and my Cisco Spark Webhooks are firing against it.

Is there a way to see if the SaaS controllers have the Let's Encrpt Root CA?

Best

Tim

Re: HTTP Template Testing Error

CommunityUser — Mon, 04 Dec 2017 14:43:41 GMT

Hi Tim,

Sorry for the delay in my reply, let me see if I can get someone with expertise on CAs to help you.

Cody

Re: HTTP Template Testing Error

CommunityUser — Tue, 05 Dec 2017 14:47:55 GMT

Howdy,

thanks, appreciate it. Looking forward to hearing back.

Best

Tim

Re: HTTP Template Testing Error

Saradhi_Pothara — Tue, 05 Dec 2017 18:37:11 GMT

Hi Tim,

Let's Encrypt certs are not part of the truststore packaged with the SaaS controllers. We add it on-demand to SaaS controllers and we are also working on keeping up with the new certs included inMozillaʼs CA Certificate Program.

For now if you could give me the following details: (if you cannot post the details here please open a support case)

1) SaaS controller URL

2) HTTPS end point URL (if publlicly accessible for me to check what is the root and intermediate cert that it is using)

I can get the Let's Encrypt root and get it added to the truststore.

But the appserver needs to be restarted once the certs are imported. Your test runs would succeed without restart but the actual invokation of the template will not work till restart of appserver.

Regards,
Saradhi

Re: HTTP Template Testing Error

CommunityUser — Tue, 05 Dec 2017 19:46:58 GMT

Hi Saradhi!

thank you for looking into this!

here are the details:

1. controller url: ciscotim.saas.appdynamics.com

2. server url: https://www.bigdiggy.com/appdtriagebot

note, that I've blocked out a number of user agents on the webserver, so if you get a 500 error that is the reasons. Note also that I am blocking HTTP verbs except for POST and DELETE.

Best

Tim

Re: HTTP Template Testing Error

Saradhi_Pothara — Tue, 05 Dec 2017 21:59:37 GMT

Hi Tim,

I could get the certs. I will have to work with our Security and Operations team to get this through security approval and then will have to restart the Controller appserver. Will keep you posted with the updates but please note this process will take a couple of days.

Regards,
Saradhi

Re: HTTP Template Testing Error

CommunityUser — Wed, 06 Dec 2017 14:59:01 GMT

Thank you!

looking forward to hearing back once things are in place!

Best

Tim

Re: HTTP Template Testing Error

CommunityUser — Fri, 08 Dec 2017 23:44:43 GMT

Howdy! Any word on this?

Thanks!

Tim

Re: HTTP Template Testing Error

Saradhi_Pothara — Sat, 09 Dec 2017 05:26:17 GMT

Hi Tim,

This is currently going through security review. As this needs a controller restart after import, and as this controller hosts other accounts we would need to coordinate a downtime as well. Will keep you posted.

Regards,
Saradhi

Re: HTTP Template Testing Error

Saradhi_Pothara — Sat, 16 Dec 2017 04:32:48 GMT

Hi Tim,

Apologies for the delay. This is still going through security review. I will keep you posted.

Regards,
Saradhi

Re: HTTP Template Testing Error

Saradhi_Pothara — Tue, 19 Dec 2017 13:19:59 GMT

Hi Tim,

Security team approved importing the certificates. OPS team is working on importing the certs but it will take some more days (no ETA yet) as a downtime needs to be planned for Controller Java to pick up the new certs from the truststore.

Regards,
Saradhi

Re: HTTP Template Testing Error

Saradhi_Pothara — Thu, 04 Jan 2018 14:23:34 GMT

Hi Tim,

The certificates are imported to the trusstore. So the test run for HTTP request template should now succeed.

But when you actually call the request template as part of action, you would still see the same exception because Controller appserver is not restarted yet. OPS team is working on coordinating a downtime.

Regards,
Saradhi

Re: HTTP Template Testing Error

Shraddha_Nair — Fri, 16 Aug 2019 10:02:53 GMT

Hi,

I am facing some similar issue but unlike the Error Message that Tim got, my Error Message is blank and yet the test is failing. Could you please help me with the same?

Thanks in advance!