AVAYA One-X Client Enablement Server (CES) client cert error

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
  • vtriko
    Member
    • Aug 2015
    • 6
    #1

    AVAYA One-X Client Enablement Server (CES) client cert error

    Hello,

    When client try to login to CES from mobile phone One-X client the system get error.
    "Security certificate error"

    About Avaya one-X® Client Enablement Services Administration
    Version 6.2
    Build: 6.2.2.0.13
    Attached Files
    Tags: ces, one-x
  • mlombardi1
    Legend
    • Sep 2010
    • 533
    #2
    Was the default CES certificate replaced? New versions of the client do not support the factory certificates for security reasons. Avaya expects customers to implement their own certs.
    Meridian IT - Senior Engineer

    Comment

    • vtriko
      Member
      • Aug 2015
      • 6
      #3
      I see....
      Ok, I'l try to create the own certs. I see it a Avaya doc.
      Thanks a lot!

      Comment

      • vtriko
        Member
        • Aug 2015
        • 6
        #4
        I'm renew all cesrts by documentation bun its not help.
        This is trace log from CES server:

        [10/29/15 16:03:15:789 MSK] 00000089 SystemErr R java.nio.channels.ClosedChannelException
        [10/29/15 16:03:15:789 MSK] 00000089 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.channelDisc onnected(SslHandler.java:509)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.Channels.fireChannelDiscon nected(Channels.java:399)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.close(AbstractNioWorker.java:616)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:101)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
        [10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
        [10/29/15 16:03:15:791 MSK] 00000089 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
        [10/29/15 16:03:15:791 MSK] 00000089 SystemErr R at java.lang.Thread.run(Thread.java:738)
        [10/29/15 16:03:15:848 MSK] 00000088 SystemErr R javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
        [10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.o.a(o.java:17)
        [10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:4 24)
        [10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:2 01)
        [10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.j(SSLEngineImpl.java:2 76)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:5 20)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:5 10)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.j ava:527)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:29)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslH andler.java:958)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.decode(SslH andler.java:664)
        [10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.c allDecode(FrameDecoder.java:328)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.m essageReceived(FrameDecoder.java:211)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:268)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:255)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:94)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
        [10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
        [10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
        [10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
        [10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.lang.Thread.run(Thread.java:738)
        [10/29/15 16:03:15:851 MSK] 00000088 SystemErr R javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
        [10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at com.ibm.jsse2.o.a(o.java:17)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:4 24)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:2 01)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.j(SSLEngineImpl.java:2 76)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:5 20)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:5 10)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.j ava:527)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:29)
        [10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslH andler.java:958)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.decode(SslH andler.java:664)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.c allDecode(FrameDecoder.java:328)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.m essageReceived(FrameDecoder.java:211)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:268)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:255)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:94)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
        [10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
        [10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
        [10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
        [10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
        [10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.lang.Thread.run(Thread.java:738)

        Comment

        • mlombardi1
          Legend
          • Sep 2010
          • 533
          #5
          I'd open a ticket with Avaya on this one. If the certificate you loaded into CES is a wildcard certificate, you also need to install the associated private key. I tried following the documents but I ended up asking Avaya to help when I dealt with this. CES is a challenging implementation.
          Meridian IT - Senior Engineer

          Comment

          • vtriko
            Member
            • Aug 2015
            • 6
            #6
            News!

            This happens only on Android devices. On Apple all work fine. (On Windows we don't try to test)

            Comment

            Previous template Next
            Loading