How to resolve SSL certificate and Authentication error when managing SVN repo source with TIBCO BusinessEvents WebStudio

How to resolve SSL certificate and Authentication error when managing SVN repo source with TIBCO BusinessEvents WebStudio

book

Article ID: KB0076701

calendar_today

Updated On:

Products Versions
TIBCO BusinessEvents Enterprise Edition -

Description

When user tries to integrate SVN with WebStudio and while connecting to SSL enabled SVN server facing the below error messages in the RMS logs

+++++++++++++++++
Error [main] - [WebStudio.Core.RuleFunctions.Utils.WS_RF_GetProjectListPayload] [WS-Inference-class] Exception validating SCS credentials - java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be
.ws.scs.SCSException: SCS Authentication failed
com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: SCS Authentication failed
        at com.tibco.be.ws.functions.WebstudioServerSCSFunctions.listManagedProjects(SourceFile:108)
        at be.gen.WebStudio.Core.RuleFunctions.Utils.ObjectWS_RF_GetProjectListPayloadString$.WS_RF_GetProjectListPayload(ObjectWS_RF_GetProjectListPayloadString$.java:47)
        at be.gen.WebStudio.Core.RuleFunctions.Startup.nullWS_RF_ValidateACLConfigboolean$.WS_RF_ValidateACLConfig(nullWS_RF_ValidateACLConfigboolean$.java:15)
        at be.gen.WebStudio.Core.RuleFunctions.Startup.nullWS_RF_PerformStartupActivities$.WS_RF_PerformStartupActivities(nullWS_RF_PerformStartupActivities$.java:50)
        at be.gen.WebStudio.Core.RuleFunctions.Startup.WS_RF_PerformStartupActivities.invoke(WS_RF_PerformStartupActivities.java:11)
        at com.tibco.cep.runtime.session.impl.RuleFunctionsExecAction.executeComponent(RuleFunctionsExecAction.java:65)
        at com.tibco.cep.kernel.core.rete.ReteWM$2.doTxnWork(SourceFile:538)
        at com.tibco.cep.kernel.core.rete.BeTransaction.run(SourceFile:156)
        at com.tibco.cep.kernel.core.rete.BeTransaction.execute(SourceFile:101)
        at com.tibco.cep.kernel.core.rete.ReteWM.invoke(SourceFile:588)
        at com.tibco.cep.kernel.core.rete.ReteWM.start(SourceFile:229)
        at com.tibco.cep.runtime.session.impl.RuleSessionImpl.start(RuleSessionImpl.java:385)
        at com.tibco.cep.runtime.service.cluster.agent.InferenceAgent.onActivate(InferenceAgent.java:981)
        at com.tibco.cep.runtime.service.cluster.agent.AbstractCacheAgent.activate(AbstractCacheAgent.java:151)
        at com.tibco.cep.runtime.service.cluster.agent.AbstractCacheAgent.start(AbstractCacheAgent.java:165)
        at com.tibco.cep.runtime.service.cluster.agent.AgentRuntimePolicyManager.tryActivateAgent(AgentRuntimePolicyManager.java:176)
        at com.tibco.cep.runtime.service.cluster.agent.AgentRuntimePolicyManager.stabilizeCluster(AgentRuntimePolicyManager.java:251)
        at com.tibco.cep.runtime.service.cluster.agent.AgentRuntimePolicyManager.tryActivateLocalAgents(AgentRuntimePolicyManager.java:305)
        at com.tibco.cep.runtime.service.cluster.agent.DefaultAgentManager.start(DefaultAgentManager.java:106)
        at com.tibco.cep.runtime.service.cluster.MultiAgentCluster.start(MultiAgentCluster.java:261)
        at com.tibco.cep.runtime.session.impl.RuleServiceProviderImpl.startCluster(RuleServiceProviderImpl.java:934)
        at com.tibco.cep.runtime.session.impl.RuleServiceProviderImpl.configure(RuleServiceProviderImpl.java:300)
        at com.tibco.cep.container.standalone.BEMain.jumpStart(SourceFile:169)
        at com.tibco.cep.container.standalone.BEMain.main(SourceFile:71)
Caused by: com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: SCS Authentication failed
        at com.tibco.be.ws.scs.impl.repo.AbstractRepositoryIntegration.execCommand(SourceFile:627)
        at com.tibco.be.ws.scs.impl.repo.svn.SVNIntegration.list(SourceFile:57)
        at com.tibco.be.ws.scs.impl.repo.AbstractRepositoryIntegration.listManagedProjects(SourceFile:57)
        at com.tibco.be.ws.functions.WebstudioServerSCSFunctions.listManagedProjects(SourceFile:106)
        ... 23 more
Caused by: com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: com.tibco.be.ws.scs.SCSException: SCS Authentication failed
        at com.tibco.be.ws.scs.impl.repo.svn.SVNIntegration.checkForAuthenticationFailure(SourceFile:31)
        at com.tibco.be.ws.scs.impl.repo.AbstractRepositoryIntegration.execCommand(SourceFile:623)
        ... 26 more
++++++++++++++++

Issue/Introduction

How-to-resolve-SSL-certificate-and-Authentication-error-when-integrating-SVN-with-BusinessEvents-WebStudio

Environment

All Operating Systems

Resolution

The reported exception occurs when user account does not have permissions to access the selected SVN resource or providing invalid authentication credentials.
The RMS server will execute the configured svn binary and reads the output (Authentication error returned if output is null or output includes "Authentication failed").

Here is an additional error:
+++
Error [$default.be.mt$.Worker.1] - [WebStudio.Core.RuleFunctions.Utils.WS_RF_GetProjectListPayload] [WS-Inference-class] Exception validating SCS credentials - java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: svn: E170013: Unable to connect to a repository at URL 'https://<svnserver>/BusinessEvents'
svn: E230001: Server SSL certificate verification failed: certificate issued for a different hostname, issuer is not trusted

com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: svn: E170013: Unable to connect to a repository at URL 'https://<svnserver>/BusinessEvents'
svn: E230001: Server SSL certificate verification failed: certificate issued for a different hostname, issuer is not trusted

at com.tibco.be.ws.functions.WebstudioServerSCSFunctions.listManagedProjects(SourceFile:108)
at be.gen.WebStudio.Core.RuleFunctions.Utils.ObjectWS_RF_GetProjectListPayloadStringString$.WS_RF_GetProjectListPayload(ObjectWS_RF_GetProjectListPayloadStringString$.java:49)
at be.gen.WebStudio.Core.RuleFunctions.Utils.Lifecycle.WS_RF_LoadProjectsFromSCS$oversizeName.WS_RF_LoadProjectsFromSCS(WS_RF_LoadProjectsFromSCS$oversizeName.java:31)
+++

The above error message was returned from svn since the certificate issued for a the hostname was not trusted.
Configure subversion client to trust the server certificate:
Try to the accept the certificate (manually) from the server and after that this might work for any subsequent requests from WebStudio.

Here are the steps to configure subversion client to trust the server certificate:

1) Clear the older entry svn.ssl.server.
please proceed to <SVN_CLIENT_HOME>/auth/svn.ssl.server directory and move the "svn.ssl.server" directory to temporary location.

2) svn list https://<YOUR_DOMAIN/svn/path/to/repository

Example: svn list https://www.mydomain.com/svn/myproject/trunk

During executing this command, you will be prompted about the “Server Certificate”. Please press “p”, for accepting this certificate permanently.
please accept it permanently.
The top most certificate for the “Server Certificate Chain” will be stored at your local as the following: –
The stored server certificate folder:

<SVN_CLIENT_HOME>/auth/svn.ssl.server
Please validate the stored server certificate folder once it gets created.

Once that’s done, try to access the svn repo again via WebStudio from the same server. This will resolve the issue.
 

Additional Information

https://stackoverflow.com/questions/3147660/server-certificate-verification-failed-issuer-is-not-trusted