topic Re: SAS Content server validation error (PKIX,cacerts) in Administration and Deployment

SAS Content server validation error (PKIX,cacerts)

Lukas852 — Tue, 09 Apr 2019 11:24:21 GMT

Hi,

i have installed SAS 9.4. (Metadata, Compute, Midtier, VA servers)

I'm doing the post-installation steps for Midtier and i encountered validation problem for SAS Content Server.

I've been searching for an answer earlier, and apparently there is wrong cacerts file in SASHome/SASPrivateJavaRuntimeEnvironment/9.4/jre/lib/security.

Some suggested i get our ssl certificate (or download it via browser from our web app site) and add it to current cacerts in jre.

Using this command keytool -trustcacerts -keystore "%JAVA_HOME%jre\lib\security\cacerts" -storepass changeit -importcert -alias <alias_name> -file <path_to_crt_file>

I did that (on the midtier server, which is the blued-out server in the picture error message), restarted the servers, but iam still getting the same error.

How can i fix this problem, please?

Regards,

Lukas

Re: SAS Content server validation error (PKIX,cacerts)

alexal — Tue, 09 Apr 2019 11:28:45 GMT

@Lukas852 ,

You shouldn't use keytool with any SAS Trusted CA Bundles. Please import the certificate using SAS Deployment Manager -> Manage Trusted CA Bundle -> (33) Add Certificate to Trusted CA Bundle.

Re: SAS Content server validation error (PKIX,cacerts)

Lukas852 — Tue, 16 Apr 2019 13:23:00 GMT

Thanks, for a hint.

I managed to solve this - by using Deployment Manager on metadata server as well and adding the certificate.

Before i only added certificate on midtier server, which wasn't enough.

Re: SAS Content server validation error (PKIX,cacerts)

alexal — Tue, 16 Apr 2019 13:30:21 GMT

@Lukas852 ,

You are welcome. I'm glad that the problem has been resolved.