Resolution:
Description:
============
TIBCO ActiveMatrix BusinessWorks SSL handshake does not initialize and throws the following error:

com.tibco.security.AXSecurityException: Unable to construct cert chain
    at com.tibco.security.CertUtils.sortCerts(CertUtils.java:156)
    at com.tibco.security.impl.entrust61.void.init(IdentityImpl.java:257)
    at com.tibco.security.IdentityFactory.createIdentity(IdentityFactory.java:66)
    at com.tibco.plugin.share.security.IdentityUtilities.a(Unknown Source)
    at com.tibco.plugin.share.security.IdentityUtilities.createUrlIdentity(Unknown Source)
    at com.tibco.plugin.share.security.TIBCryptServerSocketFactory2.int(Unknown Source)
    at com.tibco.plugin.share.security.TIBCryptServerSocketFactory2.a(Unknown Source)
    at com.tibco.plugin.share.security.TIBCryptServerSocketFactory2.a(Unknown Source)
    at com.tibco.plugin.share.security.TIBCryptServerSocketFactory2.createSocket(Unknown Source)
    at org.apache.tomcat.util.net.JIoEndpoint.bind(JIoEndpoint.java:393)
    at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:610)
    at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:429)
    at org.apache.coyote.http11.AbstractHttp11JsseProtocol.init(AbstractHttp11JsseProtocol.java:119)
    at org.apache.catalina.connector.Connector.initInternal(Connector.java:981)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at org.apache.catalina.core.StandardService.initInternal(StandardService.java:559)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:814)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at com.tibco.bw.service.binding.bwhttp.tomcat.TomcatServer.startServer(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.HttpDriver.startServer(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.HttpDriver.startListening(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.impl.HttpTransportApplication.activate(Unknown Source)
    at com.tibco.bw.service.impl.DefaultService.activate(Unknown Source)
    at com.tibco.plugin.http.HTTPEventSource.activate(Unknown Source)
    at com.tibco.pe.core.ProcessStarter.setState(Unknown Source)
    at com.tibco.pe.core.JobPool.if(Unknown Source)
    at com.tibco.pe.core.JobPool.resume(Unknown Source)
    at com.tibco.pe.core.JobPool.a(Unknown Source)
    at com.tibco.pe.core.JobPool.startNotFT(Unknown Source)
    at com.tibco.pe.PEMain.start(Unknown Source)
    at com.tibco.pe.debug.DebugInfo.a(Unknown Source)
    at com.tibco.pe.debug.DebugInfo.initEngine(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.initEngine(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.doDebug(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.reallyStart(Unknown Source)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.tibco.util.Trampoline.invoke(Trampoline.java:136)
    at com.tibco.ui.BusyWait.run(BusyWait.java:428)
    at java.lang.Thread.run(Unknown Source)
2014 Apr 30 11:57:54:238 PDT BW.sample Error Failed to initialize end point associated with ProtocolHandler ["http-bio-7687"]
java.io.IOException: An AXSecurityException was thrown while trying to create the server socket on the port [ 7687] with the message:
Unable to construct cert chain
    at com.tibco.plugin.share.security.TIBCryptServerSocketFactory2.createSocket(Unknown Source)
    at org.apache.tomcat.util.net.JIoEndpoint.bind(JIoEndpoint.java:393)
    at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:610)
    at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:429)
    at org.apache.coyote.http11.AbstractHttp11JsseProtocol.init(AbstractHttp11JsseProtocol.java:119)
    at org.apache.catalina.connector.Connector.initInternal(Connector.java:981)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at org.apache.catalina.core.StandardService.initInternal(StandardService.java:559)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:814)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at com.tibco.bw.service.binding.bwhttp.tomcat.TomcatServer.startServer(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.HttpDriver.startServer(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.HttpDriver.startListening(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.impl.HttpTransportApplication.activate(Unknown Source)
    at com.tibco.bw.service.impl.DefaultService.activate(Unknown Source)
    at com.tibco.plugin.http.HTTPEventSource.activate(Unknown Source)
    at com.tibco.pe.core.ProcessStarter.setState(Unknown Source)
    at com.tibco.pe.core.JobPool.if(Unknown Source)
    at com.tibco.pe.core.JobPool.resume(Unknown Source)
    at com.tibco.pe.core.JobPool.a(Unknown Source)
    at com.tibco.pe.core.JobPool.startNotFT(Unknown Source)
    at com.tibco.pe.PEMain.start(Unknown Source)
    at com.tibco.pe.debug.DebugInfo.a(Unknown Source)
    at com.tibco.pe.debug.DebugInfo.initEngine(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.initEngine(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.doDebug(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.reallyStart(Unknown Source)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.tibco.util.Trampoline.invoke(Trampoline.java:136)
    at com.tibco.ui.BusyWait.run(BusyWait.java:428)
    at java.lang.Thread.run(Unknown Source)
2014 Apr 30 11:57:54:242 PDT BW.sample Error Failed to initialize connector [Connector[HTTP/1.1-7687]]
org.apache.catalina.LifecycleException: Failed to initialize component [Connector[HTTP/1.1-7687]]
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:106)
    at org.apache.catalina.core.StandardService.initInternal(StandardService.java:559)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:814)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    at com.tibco.bw.service.binding.bwhttp.tomcat.TomcatServer.startServer(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.HttpDriver.startServer(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.HttpDriver.startListening(Unknown Source)
    at com.tibco.bw.service.binding.bwhttp.impl.HttpTransportApplication.activate(Unknown Source)
    at com.tibco.bw.service.impl.DefaultService.activate(Unknown Source)
    at com.tibco.plugin.http.HTTPEventSource.activate(Unknown Source)
    at com.tibco.pe.core.ProcessStarter.setState(Unknown Source)
    at com.tibco.pe.core.JobPool.if(Unknown Source)
    at com.tibco.pe.core.JobPool.resume(Unknown Source)
    at com.tibco.pe.core.JobPool.a(Unknown Source)
    at com.tibco.pe.core.JobPool.startNotFT(Unknown Source)
    at com.tibco.pe.PEMain.start(Unknown Source)
    at com.tibco.pe.debug.DebugInfo.a(Unknown Source)
    at com.tibco.pe.debug.DebugInfo.initEngine(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.initEngine(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.doDebug(Unknown Source)
    at com.tibco.ae.tools.palettes.processpalette.debug.DebugHandler.reallyStart(Unknown Source)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
    at java.lang.reflect.Method.invoke(Unknown Source)
    at com.tibco.util.Trampoline.invoke(Trampoline.java:136)
    at com.tibco.ui.BusyWait.run(BusyWait.java:428)
    at java.lang.Thread.run(Unknown Source)
Caused by: org.apache.catalina.LifecycleException: Protocol handler initialization failed
    at org.apache.catalina.connector.Connector.initInternal(Connector.java:983)
    at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:102)
    ... 28 more
Caused by: java.io.IOException: An AXSecurityException was thrown while trying to create the server socket on the port [ 7687] with the message:
Unable to construct cert chain
    at com.tibco.plugin.share.security.TIBCryptServerSocketFactory2.createSocket(Unknown Source)
    at org.apache.tomcat.util.net.JIoEndpoint.bind(JIoEndpoint.java:393)
    at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:610)
    at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:429)
    at org.apache.coyote.http11.AbstractHttp11JsseProtocol.init(AbstractHttp11JsseProtocol.java:119)
    at org.apache.catalina.connector.Connector.initInternal(Connector.java:981)



Environment:
===========
All O.S.

TRA 5.8.0, Administrator 5.8.0, BW 5.11.x

Symptoms:
========
SSL handshake initialization fails.

Cause:
=====
ENTRUST is the default security vendor used by TIBCO ActiveMatrix BusinessWorks which is very strict.

Resolution:
==========

Add the following property in the designer.tra file so that BW to uses j2se instead of entrust.
========================================
java.property.TIBCO_SECURITY_VENDOR=j2se
========================================

Restart the Designer after adding the property. If this is in a deployed application, you can try adding this into the deployed BW application TRA file.

During an SSL handshake, the BW client throws the exception, "java.net.ConnectException: Connection refused: connect".