Avaya Support Forums  

Go Back   Avaya Support Forums > Avaya Aura & Unified Communications

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 10-28-2015, 03:17 AM
vtriko vtriko is offline
Member
 
Join Date: Aug 2015
Posts: 6
vtriko has 10 reputation points
Exclamation AVAYA One-X Client Enablement Server (CES) client cert error

Hello,

When client try to login to CES from mobile phone One-X client the system get error.
"Security certificate error"

About Avaya one-X® Client Enablement Services Administration
Version 6.2
Build: 6.2.2.0.13
Attached Images
File Type: jpg Z-M9gDiuziE.jpg (25.3 KB, 5 views)
Reply With Quote
  #2  
Old 10-28-2015, 06:03 AM
mlombardi1's Avatar
mlombardi1 mlombardi1 is offline
Genius
 
Join Date: Sep 2010
Location: New York
Posts: 381
mlombardi1 has 25 to 49 reputation pointsmlombardi1 has 25 to 49 reputation pointsmlombardi1 has 25 to 49 reputation points
Default

Was the default CES certificate replaced? New versions of the client do not support the factory certificates for security reasons. Avaya expects customers to implement their own certs.
Reply With Quote
  #3  
Old 10-28-2015, 06:18 AM
vtriko vtriko is offline
Member
 
Join Date: Aug 2015
Posts: 6
vtriko has 10 reputation points
Default

I see....
Ok, I'l try to create the own certs. I see it a Avaya doc.
Thanks a lot!
Reply With Quote
  #4  
Old 10-29-2015, 05:14 AM
vtriko vtriko is offline
Member
 
Join Date: Aug 2015
Posts: 6
vtriko has 10 reputation points
Default

I'm renew all cesrts by documentation bun its not help.
This is trace log from CES server:

[10/29/15 16:03:15:789 MSK] 00000089 SystemErr R java.nio.channels.ClosedChannelException
[10/29/15 16:03:15:789 MSK] 00000089 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.channelDisc onnected(SslHandler.java:509)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.Channels.fireChannelDiscon nected(Channels.java:399)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.close(AbstractNioWorker.java:616)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:101)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
[10/29/15 16:03:15:790 MSK] 00000089 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
[10/29/15 16:03:15:791 MSK] 00000089 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
[10/29/15 16:03:15:791 MSK] 00000089 SystemErr R at java.lang.Thread.run(Thread.java:738)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.o.a(o.java:17)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:4 24)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:2 01)
[10/29/15 16:03:15:848 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.j(SSLEngineImpl.java:2 76)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:5 20)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:5 10)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.j ava:527)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:29)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslH andler.java:958)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.decode(SslH andler.java:664)
[10/29/15 16:03:15:849 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.c allDecode(FrameDecoder.java:328)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.m essageReceived(FrameDecoder.java:211)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:268)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:255)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:94)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
[10/29/15 16:03:15:850 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at java.lang.Thread.run(Thread.java:738)
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R javax.net.ssl.SSLException: Received fatal alert: certificate_unknown
[10/29/15 16:03:15:851 MSK] 00000088 SystemErr R at com.ibm.jsse2.o.a(o.java:17)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:4 24)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:2 01)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.j(SSLEngineImpl.java:2 76)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.b(SSLEngineImpl.java:5 20)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.a(SSLEngineImpl.java:5 10)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at com.ibm.jsse2.SSLEngineImpl.unwrap(SSLEngineImpl.j ava:527)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:29)
[10/29/15 16:03:15:852 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslH andler.java:958)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.ssl.SslHandler.decode(SslH andler.java:664)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.c allDecode(FrameDecoder.java:328)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.handler.codec.frame.FrameDecoder.m essageReceived(FrameDecoder.java:211)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:268)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.Channels.fireMessageReceiv ed(Channels.java:255)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.read( NioWorker.java:94)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.processSelectedKeys(AbstractNioWorker.java:372)
[10/29/15 16:03:15:853 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.AbstractNioWork er.run(AbstractNioWorker.java:246)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at org.jboss.netty.channel.socket.nio.NioWorker.run(N ioWorker.java:38)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run Task(ThreadPoolExecutor.java:897)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:919)
[10/29/15 16:03:15:854 MSK] 00000088 SystemErr R at java.lang.Thread.run(Thread.java:738)
Reply With Quote
  #5  
Old 10-29-2015, 05:38 AM
mlombardi1's Avatar
mlombardi1 mlombardi1 is offline
Genius
 
Join Date: Sep 2010
Location: New York
Posts: 381
mlombardi1 has 25 to 49 reputation pointsmlombardi1 has 25 to 49 reputation pointsmlombardi1 has 25 to 49 reputation points
Default

I'd open a ticket with Avaya on this one. If the certificate you loaded into CES is a wildcard certificate, you also need to install the associated private key. I tried following the documents but I ended up asking Avaya to help when I dealt with this. CES is a challenging implementation.
Reply With Quote
  #6  
Old 11-10-2015, 12:37 AM
vtriko vtriko is offline
Member
 
Join Date: Aug 2015
Posts: 6
vtriko has 10 reputation points
Default

News!

This happens only on Android devices. On Apple all work fine. (On Windows we don't try to test)
Reply With Quote
Reply

Tags
ces, one-x

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -7. The time now is 02:21 PM.

This Forum is provided solely for the use and convenience of Avaya customers and partners. Use of the Forum is subject to the Terms and Use and Privacy Statement found at www.avaya.com. No other use is permitted. The Forum including all content posted is “AS IS” and Avaya expressly disclaims all warranties and/or guarantees as to its accuracy, reliability, usefulness, quality or non-infringement of intellectual property. Avaya reserves the right to remove any content posted on the Forum at any time and for whatever reason.

Avaya will not be liable for any content posted on this Forum, including, without limitation, any errors or omissions or for any losses or damages of any kind incurred as a result of use or reliance on any content, regardless of its origin.

You expressly understand and agree that you assume all risks associated with use or reliance on this content.