Error validating the SAS Content server

[RupaJ]

Hello,

I have successfully installed and configured the SAS meta, compute and mid-tier on Rhel 7 virtual server. While validating the content server, I am getting the below error. 

[8/8/18 3:18 PM] INFO: Starting simple validation for WebDAV server (level 1) - ping
[8/8/18 3:18 PM] INFO: Ping successful!
[8/8/18 3:18 PM] INFO: Starting extended validation for WebDAV server (level 1) - Making a connection
[8/8/18 3:18 PM] INFO: Path: 'https://abcd:8343/SASContentServer/repository/default/sasfolders/'
[8/8/18 3:18 PM] SEVERE: Exception accessing https://abcd:8343 (sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)

Any idea, how do I get past this error?

Thank you. 

[RupaJ]

I see this KB.

http://support.sas.com/kb/39/690.html

But I don't see the path 

/usr/jdk/jdk1.5.0_12/jre/lib/security 

I am installed,configured 9.4 M5 

[RupaJ]

I see this one which is more specific to SAS 9.4 M3 and higher releases.

http://support.sas.com/kb/52/099.html

I did import the certs with SDM and they were successful. I have configured the mid-tier and able to launch SAS studio/SAS EM. Only validating content server is failing with the mentioned error. 

[PaulHomes]

Just to confirm, on which machines did you use SAS Deployment Manager to import your certs? Did it include the (client?) machine where you are running SAS Management Console to do the validation of the SAS Content Server?

[RupaJ]

Hi @PaulHomes

Yes, I am launching SASMC from the same server where I imported the certs. 

[PaulHomes]

I that case, if you are running SAS MC on a machine where you have successfully added the CA cert(s) into the SAS Private JRE Trusted CA Bundle then I would expect it to work. I just checked validating the SAS Content Server using SAS MC in my own environment where we have a chain (server>site-intermediate-CA>site-root-CA where both CA's are in the Trusted CA Bundle) and that validated ok:

[10/08/18 9:59 AM] INFO: Starting simple validation for WebDAV server (level 1) - ping
[10/08/18 9:59 AM] INFO: Ping successful!
[10/08/18 9:59 AM] INFO: Starting extended validation for WebDAV server (level 1) - Making a connection
[10/08/18 9:59 AM] INFO: Path: 'https://server.sub.example.com:8343/SASContentServer/repository/default/sasfolders/'
[10/08/18 9:59 AM] INFO: Connection successful!
[10/08/18 9:59 AM] INFO: Starting extended validation for WebDAV server (level 2) - WebDAV enabled
[10/08/18 9:59 AM] INFO: Server is WebDAV enabled!
[10/08/18 9:59 AM] INFO: Starting extended validation for WebDAV server (level 3) - Path existence
[10/08/18 9:59 AM] INFO: Path exists!

In my case I was running SAS Management Console (9.4 M5) on Windows verifying a SAS Content Server on Linux and so the SAS Deployment Manager had been previously used on both Linux and Windows to add the CA certs on both platforms.

I would suggest you double check the CA(s) in your chain are present in your SAS Private JRE Trusted CA Bundle(s). I posted the method I use to confirm this in a blog post: Did I add that CA Certificate to the SAS Trusted CA Bundle?

If that doesn't help locate the source of the problem then I would suggest contacting SAS Technical Support. 

[RupaJ]

Hello @PaulHomes

Thanks much for sharing the article. I do see everything is in place. However still I get the error. I am checking with SAS support.