Highlighted
Established Member.. kenneth.gonzale
Established Member..
305 views

SiS Support Tip: After 11.20 upgrade HTTPS monitors fail with "unknown error (12,046)"

Here is an example of the error message in the error.log file:

 

2012-08-23 16:11:07,948 [Residential Wireless : https://mobile.timewarnercable.com(URLMonitors.2/6) ] (ApacheHttpUtils.java:473) ERROR - problem while sending data to URL: https://sso-cdptpa.timewarnercable.com:443/nesp/app/plogin?c=secure/twcres/password/uri&%22https://mobile.timewarnercable.com/%22 error:  URL: https://sso-cdptpa.timewarnercable.com:443/nesp/app/plogin?c=secure/twcres/password/uri&%22https://mobile.timewarnercable.com/%22, host: sso-cdptpa.timewarnercable.com, port: 443, UsingProxy: false, isHTTPS(SSL): true, javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints, currentRetry: 0

 

Cause

 

The exception is being thrown by a new “security constraint” introduced in JDK 1.7 in which SiteScope 11.20 is built. This new setting enforces use of strongest encryption algorithms for certificates.

 

Workaround

 

To have same behavior as in Java 6 go into SiteScope/java/lib/security/java.security and change

 

jdk.certpath.disabledAlgorithms=MD2

 

to

 

jdk.certpath.disabledAlgorithms=

 

or comment that line with '#'

 

This setting seems to have an odd behavior in Java 7, it has been detected blocking certs signed with SHA1 even when it shouldn't. Also, some pages pass in Java 6 with that setting but not in Java 7.

Kenneth Gonzalez
HP Support

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you haven’t tried it yet, come and join us in our entitled forums at Support Customer Forums
Labels (2)
Tags (1)
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.