How to resolve SSL certificate and Authentication error when managing SVN repo source with TIBCO BusinessEvents WebStudio
book
Article ID: KB0076701
calendar_today
Updated On:
Products
Versions
TIBCO BusinessEvents Enterprise Edition
-
Description
When user tries to integrate SVN with WebStudio and while connecting to SSL enabled SVN server facing the below error messages in the RMS logs
+++++++++++++++++ Error [main] - [WebStudio.Core.RuleFunctions.Utils.WS_RF_GetProjectListPayload] [WS-Inference-class] Exception validating SCS credentials - java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be .ws.scs.SCSException: SCS Authentication failed com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: SCS Authentication failed at com.tibco.be.ws.functions.WebstudioServerSCSFunctions.listManagedProjects(SourceFile:108) at be.gen.WebStudio.Core.RuleFunctions.Utils.ObjectWS_RF_GetProjectListPayloadString$.WS_RF_GetProjectListPayload(ObjectWS_RF_GetProjectListPayloadString$.java:47) at be.gen.WebStudio.Core.RuleFunctions.Startup.nullWS_RF_ValidateACLConfigboolean$.WS_RF_ValidateACLConfig(nullWS_RF_ValidateACLConfigboolean$.java:15) at be.gen.WebStudio.Core.RuleFunctions.Startup.nullWS_RF_PerformStartupActivities$.WS_RF_PerformStartupActivities(nullWS_RF_PerformStartupActivities$.java:50) at be.gen.WebStudio.Core.RuleFunctions.Startup.WS_RF_PerformStartupActivities.invoke(WS_RF_PerformStartupActivities.java:11) at com.tibco.cep.runtime.session.impl.RuleFunctionsExecAction.executeComponent(RuleFunctionsExecAction.java:65) at com.tibco.cep.kernel.core.rete.ReteWM$2.doTxnWork(SourceFile:538) at com.tibco.cep.kernel.core.rete.BeTransaction.run(SourceFile:156) at com.tibco.cep.kernel.core.rete.BeTransaction.execute(SourceFile:101) at com.tibco.cep.kernel.core.rete.ReteWM.invoke(SourceFile:588) at com.tibco.cep.kernel.core.rete.ReteWM.start(SourceFile:229) at com.tibco.cep.runtime.session.impl.RuleSessionImpl.start(RuleSessionImpl.java:385) at com.tibco.cep.runtime.service.cluster.agent.InferenceAgent.onActivate(InferenceAgent.java:981) at com.tibco.cep.runtime.service.cluster.agent.AbstractCacheAgent.activate(AbstractCacheAgent.java:151) at com.tibco.cep.runtime.service.cluster.agent.AbstractCacheAgent.start(AbstractCacheAgent.java:165) at com.tibco.cep.runtime.service.cluster.agent.AgentRuntimePolicyManager.tryActivateAgent(AgentRuntimePolicyManager.java:176) at com.tibco.cep.runtime.service.cluster.agent.AgentRuntimePolicyManager.stabilizeCluster(AgentRuntimePolicyManager.java:251) at com.tibco.cep.runtime.service.cluster.agent.AgentRuntimePolicyManager.tryActivateLocalAgents(AgentRuntimePolicyManager.java:305) at com.tibco.cep.runtime.service.cluster.agent.DefaultAgentManager.start(DefaultAgentManager.java:106) at com.tibco.cep.runtime.service.cluster.MultiAgentCluster.start(MultiAgentCluster.java:261) at com.tibco.cep.runtime.session.impl.RuleServiceProviderImpl.startCluster(RuleServiceProviderImpl.java:934) at com.tibco.cep.runtime.session.impl.RuleServiceProviderImpl.configure(RuleServiceProviderImpl.java:300) at com.tibco.cep.container.standalone.BEMain.jumpStart(SourceFile:169) at com.tibco.cep.container.standalone.BEMain.main(SourceFile:71) Caused by: com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: SCS Authentication failed at com.tibco.be.ws.scs.impl.repo.AbstractRepositoryIntegration.execCommand(SourceFile:627) at com.tibco.be.ws.scs.impl.repo.svn.SVNIntegration.list(SourceFile:57) at com.tibco.be.ws.scs.impl.repo.AbstractRepositoryIntegration.listManagedProjects(SourceFile:57) at com.tibco.be.ws.functions.WebstudioServerSCSFunctions.listManagedProjects(SourceFile:106) ... 23 more Caused by: com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: com.tibco.be.ws.scs.SCSException: SCS Authentication failed at com.tibco.be.ws.scs.impl.repo.svn.SVNIntegration.checkForAuthenticationFailure(SourceFile:31) at com.tibco.be.ws.scs.impl.repo.AbstractRepositoryIntegration.execCommand(SourceFile:623) ... 26 more ++++++++++++++++
The reported exception occurs when user account does not have permissions to access the selected SVN resource or providing invalid authentication credentials. The RMS server will execute the configured svn binary and reads the output (Authentication error returned if output is null or output includes "Authentication failed").
Here is an additional error: +++ Error [$default.be.mt$.Worker.1] - [WebStudio.Core.RuleFunctions.Utils.WS_RF_GetProjectListPayload] [WS-Inference-class] Exception validating SCS credentials - java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: svn: E170013: Unable to connect to a repository at URL 'https://<svnserver>/BusinessEvents' svn: E230001: Server SSL certificate verification failed: certificate issued for a different hostname, issuer is not trusted
com.tibco.cep.runtime.model.exception.impl.BEExceptionImpl: java.lang.RuntimeException: com.tibco.be.ws.scs.SCSException: com.tibco.be.ws.scs.SCSException: svn: E170013: Unable to connect to a repository at URL 'https://<svnserver>/BusinessEvents' svn: E230001: Server SSL certificate verification failed: certificate issued for a different hostname, issuer is not trusted
at com.tibco.be.ws.functions.WebstudioServerSCSFunctions.listManagedProjects(SourceFile:108) at be.gen.WebStudio.Core.RuleFunctions.Utils.ObjectWS_RF_GetProjectListPayloadStringString$.WS_RF_GetProjectListPayload(ObjectWS_RF_GetProjectListPayloadStringString$.java:49) at be.gen.WebStudio.Core.RuleFunctions.Utils.Lifecycle.WS_RF_LoadProjectsFromSCS$oversizeName.WS_RF_LoadProjectsFromSCS(WS_RF_LoadProjectsFromSCS$oversizeName.java:31) +++
The above error message was returned from svn since the certificate issued for a the hostname was not trusted. Configure subversion client to trust the server certificate: Try to the accept the certificate (manually) from the server and after that this might work for any subsequent requests from WebStudio.
Here are the steps to configure subversion client to trust the server certificate:
1) Clear the older entry svn.ssl.server. please proceed to <SVN_CLIENT_HOME>/auth/svn.ssl.server directory and move the "svn.ssl.server" directory to temporary location.
2) svn list https://<YOUR_DOMAIN/svn/path/to/repository
Example: svn list https://www.mydomain.com/svn/myproject/trunk
During executing this command, you will be prompted about the “Server Certificate”. Please press “p”, for accepting this certificate permanently. please accept it permanently. The top most certificate for the “Server Certificate Chain” will be stored at your local as the following: – The stored server certificate folder:
<SVN_CLIENT_HOME>/auth/svn.ssl.server Please validate the stored server certificate folder once it gets created.
Once that’s done, try to access the svn repo again via WebStudio from the same server. This will resolve the issue.