Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance SSL config options to allow support for Root, Intermediate, and Full Cert Chain #391

Open
J-J-E opened this issue Jun 21, 2024 · 0 comments

Comments

@J-J-E
Copy link

J-J-E commented Jun 21, 2024

Currently, this is a limitation of the current cookbooks. At this time the cookbooks can only import the root cert and signed cert (pfx). These leads to missing functionality within portal for processes that rely on internal communication between the portal and server machines (only tested with enterprise primary single machine base deployment).

Without importing the intermediate certificate and the full certificate chain, the option to save credentials when adding a secure service from the federated server is missing in the web UI, and when attempting to do it programmatically through the web API, users will encounter this error:

Invalid SSL certificate found. PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Manually importing the root, intermediate, and signed cert (with using the checkbox to import certificate chain) resolves these error logs and the UI functionality returns.
image

Here is the link to the discussion between @cameronkroeker and myself.

I have also requested this to be filed as an enhancement request with my Esri Support Rep under Esri Case ENH-000168761

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant