Hi there,
Just sharing some info.
If any of you guys are having problems with the email activation not working here is the solution.
When you see a log entry like this:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Use the follwing solution to fix this problem:
Steps:
1. Download security certificate from the smtp server you are sending your email to (in my case a Windows Exchange 2010 server):
Open the URL from IE
You will get a certificate related warning message. Click on view certificate and then Install certificate. Ignore warning messages if gets displayed.
Now go to Tools->’Internet Options’ ->Content->Certificates.
Locate the installed certificate from the list of certificates.
Click “export” button and save it as “DER encoded binary” in somewhere in your PC. And upload it to the /tmp directory of your cloud-portal server.
2. Add certificate to JRE
Open a shell.
Go to “bin” directory of your JRE.
3. Use keytool command as follows to import the certificate to JRE.
keytool -import -alias mycertificate -keystore ../lib/security/cacerts -file /tmp/mycert.cer
It will ask for a password. By default the password is “changeit“.
Here I assume that your certificate is saved as “mycert.cer” in “/tmp/” directory.
4. restart the cloud-portal service.
Greetings,
Egon van Dongen
Datacenter Services
You can also adjust these settings in cloud.properties to turn off SSL:
mail.smtp.starttls.enable=true
mail.smtp.starttls.required=true
This also applies to CPBM 1.4.x.
-David
Hi there,
Just sharing some info.
If any of you guys are having problems with the email activation not working here is the solution.
When you see a log entry like this:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Use the follwing solution to fix this problem:
Steps:
1. Download security certificate from the smtp server you are sending your email to (in my case a Windows Exchange 2010 server):
Open the URL from IE
You will get a certificate related warning message. Click on view certificate and then Install certificate. Ignore warning messages if gets displayed.
Now go to Tools->’Internet Options’ ->Content->Certificates.
Locate the installed certificate from the list of certificates.
Click “export” button and save it as “DER encoded binary” in somewhere in your PC. And upload it to the /tmp directory of your cloud-portal server.
2. Add certificate to JRE
Open a shell.
Go to “bin” directory of your JRE.
3. Use keytool command as follows to import the certificate to JRE.
keytool -import -alias mycertificate -keystore ../lib/security/cacerts -file /tmp/mycert.cer
It will ask for a password. By default the password is “changeit“.
Here I assume that your certificate is saved as “mycert.cer” in “/tmp/” directory.
4. restart the cloud-portal service.
Greetings,
Egon van Dongen
Datacenter Services
Hi Licenties CSN Groep,
You mentioned; Go to “bin” directory of your JRE. - Where would be the "bin" directory of jre in CentOS default installation? is it at "/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/bin" ?
Also "keytool -import -alias mycertificate -keystore ../lib/security/cacerts -file /tmp/mycert.cer" what are those two ".." afte -keystore switch refering to? is it refering to "/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre/lib/security/cacerts" ?
Clarification on those would be a great help
Thanks,
Hisham
Ask, Discuss, Answer
