Avaya Support Forums

Avaya Support Forums (http://support.avaya.com/forums/index.php)
-   Avaya Aura & Unified Communications (http://support.avaya.com/forums/forumdisplay.php?f=2)
-   -   AVAYA One-X Client Enablement Server (CES) client cert error (http://support.avaya.com/forums/showthread.php?t=10624)

vtriko 10-28-2015 04:17 AM

AVAYA One-X Client Enablement Server (CES) client cert error
 
1 Attachment(s)
Hello,

When client try to login to CES from mobile phone One-X client the system get error.
"Security certificate error"

About Avaya one-X Client Enablement Services Administration
Version 6.2
Build: 6.2.2.0.13

mlombardi1 10-28-2015 07:03 AM

Was the default CES certificate replaced? New versions of the client do not support the factory certificates for security reasons. Avaya expects customers to implement their own certs.

vtriko 10-28-2015 07:18 AM

I see....
Ok, I'l try to create the own certs. I see it a Avaya doc.
Thanks a lot!

vtriko 10-29-2015 06:14 AM

I'm renew all cesrts by documentation bun its not help.
This is trace log from CES server:

[10/29/15 16:03:15:789 MSK] 00000089 SystemErr R java.nio.channels.ClosedChannelException
[10/29/15 16:03:15:789 MSK] 00000089 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.channelDisc onnected(SslHandler.java:509)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.Channels.fireChannelDiscon nected(Channels.java:399)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.close(AbstractNioWorker.java:616)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:101)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
[10/29/15 16:03:15:791 MSK] 00000089 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
[10/29/15 16:03:15:791 MSK] 00000089 SystemErr R at java.lang.Thread.run(Thread.java:738)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.o.a(o.java:17)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:4 24)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:2 01)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.j(SSLEngineImpl.java:2 76)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:5 20)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:5 10)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.j ava:527)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:29)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslH andler.java:958)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.decode(SslH andler.java:664)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.c allDecode(FrameDecoder.java:328)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.m essageReceived(FrameDecoder.java:211)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:268)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:255)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:94)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.lang.Thread.run(Thread.java:738)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at com.ibm.jsse2.o.a(o.java:17)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:4 24)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:2 01)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.j(SSLEngineImpl.java:2 76)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:5 20)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:5 10)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.j ava:527)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:29)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslH andler.java:958)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.decode(SslH andler.java:664)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.c allDecode(FrameDecoder.java:328)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.m essageReceived(FrameDecoder.java:211)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:268)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:255)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:94)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.lang.Thread.run(Thread.java:738)

mlombardi1 10-29-2015 06:38 AM

I'd open a ticket with Avaya on this one. If the certificate you loaded into CES is a wildcard certificate, you also need to install the associated private key. I tried following the documents but I ended up asking Avaya to help when I dealt with this. CES is a challenging implementation.

vtriko 11-10-2015 01:37 AM

News!

This happens only on Android devices. On Apple all work fine. (On Windows we don't try to test)


All times are GMT -7. The time now is 09:39 PM.