SSL certificate exchange issue between App server and Loquendo


Doc ID    SOLN243424
Version:    1.0
Status:    Published
Published date:    20 Jan 2014
Author:   
Praveen Gopi
 

Details

Loquendo Failed to Create Grammar
AAEP version 6.0 SP2
Loquendo MRCP 7.2.2, ASR 7.10

Problem Clarification

From Experience Portal side, here's the error:
@2013-12-19
11:44:01,734|PAVB_06003|ERROR|VB|7179|Session=LGRVTMPP-2013353094401-15|Failed to
create grammar from URI:
https://167.16.162.203:8443/FD_CCVA_ASPIS/data/greek/grammars/AgentConnectGlobal_Voic
e-srgssisr.grxml Return code = CHANNEL_RESULT_FAILURE|LGRVTMPP####

From Loquendo Logs:
11:43:55.663 [3a683d31] [Flow.Dump] [CNetWrapper::GetEx] URL:
oice-srgssisr.grxml> Found: <0> Must Revalidate: <0> Stored file:
R2339

11:43:55.682 [3a683d31] [Flow.Dump] [CNetWrapper::PerformLoading] Loading failed:
SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed.
R1530

Cause

SSL certificate exchange issue between App server & Loquendo
server.

Solution

Please try the following steps to fix the issue:

- Apache Tomcat Application server on a first Linux CentOS 6 32-bit
- Updated it to run TLS/SSL per Avaya instructions (as they are per Windows systems, not all commands works at the first shot)
- Enabled also TLS/SSL
- Tested that a simple grammar “digits.xml” can be viewed by any browser both on port 8080 and secure port 8443
- Installed Loquendo Speech Server on a second CentoOS 6 32-bit machine
- Installed an MRCP client on a third machine
- Tested that the above grammar could be passed to Loquendo via standard port 8080 but failing via secure port 8443

Then:
- Updated the Loquendo configuration parameter httpSslVerifyPeer to “disable (0)” instead of the default “enable (1)” On Management Console paths are
Loquendo -> Local (127.0.0.1) -> Configuration -> Advanced -> ROCacher -> http -> httpSslVerifyPeer = disable (0)
and
Loquendo -> Local (127.0.0.1) -> Configuration -> Advanced -> MRCPv1Serverr -> http -> httpSslVerifyPeer = disable (0)
- Re-starter Loquendo from Loquendo -> Local (127.0.0.1) -> Administration
Tested again the above grammar through the secure port 8443 with

 SUCCESS!!!

So, please apply in your installation the updates above and try again (from you InfoCollector I see they are enabled).


Avaya -- Proprietary. Use pursuant to the terms of your signed agreement or Avaya policy