Absent Member.. EGarver Absent Member..
Absent Member..
249 views

Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

I followed the directions in the Installation and Administration Guide (Chapter4, page 111) and am able to produce a login page, however once I login I receive a 400 Bad Request which just keeps appending "&SHOW_SMALL_LOGON=N&SHOW_DATE_DIALOG=N" to the end of the https URL.  

 

Thanks!

0 Likes
1 Solution

Accepted Solutions
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

I came across an HP article that describes EXACTLY what our situation is...

 

http://support.openview.hp.com/selfsolve/document/KM1357294

 

It states that "If you require HTTPS on all communications you will need to use an external webserver."

 

I suppose that's an entirely different ball of wax, but at least I know I'm not alone here...

 

 

 

 

0 Likes
21 Replies
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Hi,

 

I am wondering if you are seeing a error on the serverlogs. Could you please send us more information?

 

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

That's the funny thing...normally I can go right out to them and figure out what's going on.  This time, not so much.  Here are the logs from the time I start the server, to the time I shut it back down:

 

STATUS server:main:com.mercury.itg.core.debug.monitor.PPMJbossMonitor:2014/04/03-09:25:54.164 EDT: *** Ready!
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.104 EDT: Attempting to load ESAPI.properties via file I/O.
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.104 EDT: Attempting to load ESAPI.properties as resource file via file I/O.
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.105 EDT: Found in 'org.owasp.esapi.resources' directory: /app01/PPM/server/HPPPM/esapi-props/ESAPI.properties
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.105 EDT: Loaded 'ESAPI.properties' properties file
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.105 EDT: Attempting to load validation.properties via file I/O.
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.106 EDT: Attempting to load validation.properties as resource file via file I/O.
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.106 EDT: Found in 'org.owasp.esapi.resources' directory: /app01/PPM/server/HPPPM/esapi-props/validation.properties
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.106 EDT: Loaded 'validation.properties' properties file
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.106 EDT: SecurityConfiguration for Encryptor.CipherTransformation not found in ESAPI.properties. Using default: AES/CBC/PKCS5Padding
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.131 EDT: SecurityConfiguration for Logger.ApplicationName not found in ESAPI.properties. Using default: DefaultName
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.132 EDT: SecurityConfiguration for Logger.LogApplicationName not found in ESAPI.properties. Using default: true
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:27:53.132 EDT: SecurityConfiguration for Logger.LogServerIP not found in ESAPI.properties. Using default: true
STATUS JSESSIONID=B574D2DF798D075177FAE2594027F817.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-09:28:04.529 EDT: SecurityConfiguration for Encryptor.RandomAlgorithm not found in ESAPI.properties. Using default: SHA1PRNG
STATUS server:Thread-51:com.kintana.core.server:2014/04/03-09:38:42.960 EDT: Shutting down server in 0 minutes.

0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Thanks for the information.

 

Also, can you please also provide me the screenshot of the error?

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Thanks randull,

 

There is no actual error, but rather that the screen will just not load and appears to be stuck in some sort of loop, appending the same string over and over again to the URL.  I've attached a screenshot of what happens post-login, and have crudely blacked out the server name and link names.  

0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Would you please follow below instructions?


a- Stop PPM server.
b- Delete work & tmp folders from PPM_HOME/server/SERVER_NAME (repeat for all nodes)
c- Change the port in the RMI_URL server parameter in server.conf (use an enable and free port)
d- Then from the command prompt under PPM_HOME/bin run:
sh kUpdateHtml.sh
e- Re-start PPM server
f- From the command prompt under PPM_HOME/bin run:
sh kRunCacheManager.sh A
g- Clean browser and java cache.

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Thanks again randull,

 

I have taken your suggestions, reset the RMI_URL to  port 1069, and still am experiencing the same error.

 

Interestingly, this was the only new entry in the serverLog file:

 

STATUS JSESSIONID=E635F3D9F844E438C3231CFDCF93ACEB.HPPPM,USERNAME= server:http-0.0.0.0-8443-Processor5:SystemOut:2014/04/03-17:21:32.688 EDT: SecurityConfiguration for Encryptor.RandomAlgorithm not found in ESAPI.properties. Using default: SHA1PRNG

 

 

Not sure what might be wrong, here....

0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Hi,

 

Looks like the SecurityConfiguration for Encryptor.RandomAlgorithm not found in ESAPI.properties. Using default: SHA1PRNG is not related to the issue.

 

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

I am wondering if you have test this on another browser.

 

Have you compared the URL where you are getting redireted after the log on and the one that is on the base path on the server.conf?

 

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

I am wondering if you are using an external web server.

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Hi randull,

 

Thanks for continuing to pursue this with me.  I have tried this on IE, Firefox, and Chrome, and all are producing the same results.  The BASE_URL which is configured within the server.conf file is the http, port 8080 URL, and when I access that URL via any browser it redirects me to the https, 8443 URL at which point I can login and then get stuck in the loop.  

 

Not exactly sure what you're referencing when you say external browser.  We're running this on RHEL Linux 6.2 and using the delivered JBoss components.  Does that make sense?  Thanks!

0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Hi,

 

No problem! Could you please send me the  ksupport file after replicate this issue?

 

Thanks,

Randall

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
0 Likes
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Would you suggest using the 8080 http or the 8443 as BASE_URL?

 

Also, is there a way to send you the kSupport?  Thanks!

0 Likes
Absent Member.. randull Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

You can attach it to the thread,  when you write your post down there is a place where you can attach your documents.

 

Best regards,
Randall

-- Remember to give Kudos to answers! (click the KUDOS star)
"If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.”
Absent Member.. EGarver Absent Member..
Absent Member..

Re: Has anyone ever configured SSL using Self Signed Certificates through JBoss on PPM?

Jump to solution

Thanks!!!

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.