You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Jagdish Patil <ja...@gmail.com> on 2017/12/15 07:31:17 UTC
PKIX path building failed
Hey Guys,
I am facing the following issue with this configuration:
*Configuration:*
CloudStack Version: 4.9
OS: CentOS 6.8(X86_64)
Hypervisor: KVM
CIDR:24
*Issue:*
*Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1 with
error: sun.security.validator.ValidatorException: PKIX path building
failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
to find valid certification path to requested target*
There are solutions given by multiple peoples on the internet but none of
them are helping me. Please help.
Thank You,
Jagdish Patil,
(B.Tech-Cloud Based Application: IBM)
M:8735828606 <087358%2028606>
E:jagdishpatil316@gmail.com
Re: PKIX path building failed
Posted by Jagdish Patil <ja...@gmail.com>.
Thank you for your response Sudharma,
But, this isn't working for me with respect to "HTTPS" links, but I was
also facing the same issue with respect to "HTTP" links also due to network
credentials unavailability to system vm. Then by installing Lynx (Text
based browser) I gave the credentials and templates and ISO's with HTTP
links are getting downloaded and I am able to create instances. But after
following your instructions, certificates are being imported but templates
and ISOs with respect to HTTPS links are not getting downloaded.
Thank You,
Jagdish Patil
On Tue, Dec 19, 2017 at 2:08 PM Sudharma Jain <su...@gmail.com>
wrote:
> This is problem with systemvm template. ca certificates are missing in
> realhostip.keystore on ssvm. There is an open bug CLOUDSTACK-10087 for
> this. You can try importing ca certificates on ssvm using following
> commands
>
>
> keyStore=/usr/local/cloud/systemvm/certs/realhostip.keystore
> storepass="vmops.com"
> java_home=$(readlink -f $(which java) | sed "s:/bin/java::")
> java_keystore=$java_home/jre/lib/security/cacerts
> java_store_pass="changeit"
> keytool -importkeystore -srckeystore $java_keystore -srcstorepass
> $java_store_pass -destkeystore $keyStore -deststorepass $storepass
> -noprompt
>
> Thanks,
> Sudharma
>
>
> On Tue, Dec 19, 2017 at 1:44 PM, Jagdish Patil <ja...@gmail.com>
> wrote:
>
> > Yes, I have tried multiple other templates to register, still gives PKIX
> > pth building failed error.
> >
> > On Tue, Dec 19, 2017 at 1:18 PM Makrand <ma...@gmail.com> wrote:
> >
> > > Hi,
> > >
> > > Assuming your SSVM is up and running, have you tried to register any
> > > another template? Did it work?
> > >
> > > --
> > > Makrand
> > >
> > >
> > > On Tue, Dec 19, 2017 at 11:38 AM, Jagdish Patil <
> > jagdishpatil316@gmail.com
> > > >
> > > wrote:
> > >
> > > > Thanks for responding Makrand,
> > > >
> > > > This error is occurring as soon as system VM gets downloaded and
> > started
> > > > and tries to download the CentOS5.5-KVM(No GUI) template. And I have
> > also
> > > > tried giving other HTTP URLs for registering but still, the PKIX path
> > > > building error pops up.
> > > >
> > > > I have attached a part of the log, have a look.
> > > >
> > > >
> > > >
> > > > On Mon, Dec 18, 2017 at 5:29 PM Makrand <ma...@gmail.com>
> > wrote:
> > > >
> > > >> Hello Jagdish,
> > > >>
> > > >> What is source URL of template you're trying to register?
> > > >>
> > > >> And when exactly this error is appearing? Immediately after you try
> to
> > > >> register a template?
> > > >>
> > > >>
> > > >> --
> > > >> Makrand
> > > >>
> > > >>
> > > >> On Fri, Dec 15, 2017 at 1:01 PM, Jagdish Patil <
> > > jagdishpatil316@gmail.com
> > > >> >
> > > >> wrote:
> > > >>
> > > >> > Hey Guys,
> > > >> >
> > > >> > I am facing the following issue with this configuration:
> > > >> >
> > > >> > *Configuration:*
> > > >> > CloudStack Version: 4.9
> > > >> > OS: CentOS 6.8(X86_64)
> > > >> > Hypervisor: KVM
> > > >> > CIDR:24
> > > >> >
> > > >> > *Issue:*
> > > >> >
> > > >> > *Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1
> > > with
> > > >> > error: sun.security.validator.ValidatorException: PKIX path
> > building
> > > >> > failed:
> sun.security.provider.certpath.SunCertPathBuilderException:
> > > >> unable
> > > >> > to find valid certification path to requested target*
> > > >> >
> > > >> > There are solutions given by multiple peoples on the internet but
> > none
> > > >> of
> > > >> > them are helping me. Please help.
> > > >> >
> > > >> > Thank You,
> > > >> > Jagdish Patil,
> > > >> > (B.Tech-Cloud Based Application: IBM)
> > > >> > M:8735828606 <087358%2028606> <087358%2028606> <087358%2028606>
> <087358%2028606>
> > > >> > E:jagdishpatil316@gmail.com
> > > >> >
> > > >>
> > > >
> > >
> >
>
Re: PKIX path building failed
Posted by Sudharma Jain <su...@gmail.com>.
This is problem with systemvm template. ca certificates are missing in
realhostip.keystore on ssvm. There is an open bug CLOUDSTACK-10087 for
this. You can try importing ca certificates on ssvm using following
commands
keyStore=/usr/local/cloud/systemvm/certs/realhostip.keystore
storepass="vmops.com"
java_home=$(readlink -f $(which java) | sed "s:/bin/java::")
java_keystore=$java_home/jre/lib/security/cacerts
java_store_pass="changeit"
keytool -importkeystore -srckeystore $java_keystore -srcstorepass
$java_store_pass -destkeystore $keyStore -deststorepass $storepass -noprompt
Thanks,
Sudharma
On Tue, Dec 19, 2017 at 1:44 PM, Jagdish Patil <ja...@gmail.com>
wrote:
> Yes, I have tried multiple other templates to register, still gives PKIX
> pth building failed error.
>
> On Tue, Dec 19, 2017 at 1:18 PM Makrand <ma...@gmail.com> wrote:
>
> > Hi,
> >
> > Assuming your SSVM is up and running, have you tried to register any
> > another template? Did it work?
> >
> > --
> > Makrand
> >
> >
> > On Tue, Dec 19, 2017 at 11:38 AM, Jagdish Patil <
> jagdishpatil316@gmail.com
> > >
> > wrote:
> >
> > > Thanks for responding Makrand,
> > >
> > > This error is occurring as soon as system VM gets downloaded and
> started
> > > and tries to download the CentOS5.5-KVM(No GUI) template. And I have
> also
> > > tried giving other HTTP URLs for registering but still, the PKIX path
> > > building error pops up.
> > >
> > > I have attached a part of the log, have a look.
> > >
> > >
> > >
> > > On Mon, Dec 18, 2017 at 5:29 PM Makrand <ma...@gmail.com>
> wrote:
> > >
> > >> Hello Jagdish,
> > >>
> > >> What is source URL of template you're trying to register?
> > >>
> > >> And when exactly this error is appearing? Immediately after you try to
> > >> register a template?
> > >>
> > >>
> > >> --
> > >> Makrand
> > >>
> > >>
> > >> On Fri, Dec 15, 2017 at 1:01 PM, Jagdish Patil <
> > jagdishpatil316@gmail.com
> > >> >
> > >> wrote:
> > >>
> > >> > Hey Guys,
> > >> >
> > >> > I am facing the following issue with this configuration:
> > >> >
> > >> > *Configuration:*
> > >> > CloudStack Version: 4.9
> > >> > OS: CentOS 6.8(X86_64)
> > >> > Hypervisor: KVM
> > >> > CIDR:24
> > >> >
> > >> > *Issue:*
> > >> >
> > >> > *Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1
> > with
> > >> > error: sun.security.validator.ValidatorException: PKIX path
> building
> > >> > failed: sun.security.provider.certpath.SunCertPathBuilderException:
> > >> unable
> > >> > to find valid certification path to requested target*
> > >> >
> > >> > There are solutions given by multiple peoples on the internet but
> none
> > >> of
> > >> > them are helping me. Please help.
> > >> >
> > >> > Thank You,
> > >> > Jagdish Patil,
> > >> > (B.Tech-Cloud Based Application: IBM)
> > >> > M:8735828606 <087358%2028606> <087358%2028606> <087358%2028606>
> > >> > E:jagdishpatil316@gmail.com
> > >> >
> > >>
> > >
> >
>
Re: PKIX path building failed
Posted by Jagdish Patil <ja...@gmail.com>.
Yes, I have tried multiple other templates to register, still gives PKIX
pth building failed error.
On Tue, Dec 19, 2017 at 1:18 PM Makrand <ma...@gmail.com> wrote:
> Hi,
>
> Assuming your SSVM is up and running, have you tried to register any
> another template? Did it work?
>
> --
> Makrand
>
>
> On Tue, Dec 19, 2017 at 11:38 AM, Jagdish Patil <jagdishpatil316@gmail.com
> >
> wrote:
>
> > Thanks for responding Makrand,
> >
> > This error is occurring as soon as system VM gets downloaded and started
> > and tries to download the CentOS5.5-KVM(No GUI) template. And I have also
> > tried giving other HTTP URLs for registering but still, the PKIX path
> > building error pops up.
> >
> > I have attached a part of the log, have a look.
> >
> >
> >
> > On Mon, Dec 18, 2017 at 5:29 PM Makrand <ma...@gmail.com> wrote:
> >
> >> Hello Jagdish,
> >>
> >> What is source URL of template you're trying to register?
> >>
> >> And when exactly this error is appearing? Immediately after you try to
> >> register a template?
> >>
> >>
> >> --
> >> Makrand
> >>
> >>
> >> On Fri, Dec 15, 2017 at 1:01 PM, Jagdish Patil <
> jagdishpatil316@gmail.com
> >> >
> >> wrote:
> >>
> >> > Hey Guys,
> >> >
> >> > I am facing the following issue with this configuration:
> >> >
> >> > *Configuration:*
> >> > CloudStack Version: 4.9
> >> > OS: CentOS 6.8(X86_64)
> >> > Hypervisor: KVM
> >> > CIDR:24
> >> >
> >> > *Issue:*
> >> >
> >> > *Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1
> with
> >> > error: sun.security.validator.ValidatorException: PKIX path building
> >> > failed: sun.security.provider.certpath.SunCertPathBuilderException:
> >> unable
> >> > to find valid certification path to requested target*
> >> >
> >> > There are solutions given by multiple peoples on the internet but none
> >> of
> >> > them are helping me. Please help.
> >> >
> >> > Thank You,
> >> > Jagdish Patil,
> >> > (B.Tech-Cloud Based Application: IBM)
> >> > M:8735828606 <087358%2028606> <087358%2028606> <087358%2028606>
> >> > E:jagdishpatil316@gmail.com
> >> >
> >>
> >
>
Re: PKIX path building failed
Posted by Makrand <ma...@gmail.com>.
Hi,
Assuming your SSVM is up and running, have you tried to register any
another template? Did it work?
--
Makrand
On Tue, Dec 19, 2017 at 11:38 AM, Jagdish Patil <ja...@gmail.com>
wrote:
> Thanks for responding Makrand,
>
> This error is occurring as soon as system VM gets downloaded and started
> and tries to download the CentOS5.5-KVM(No GUI) template. And I have also
> tried giving other HTTP URLs for registering but still, the PKIX path
> building error pops up.
>
> I have attached a part of the log, have a look.
>
>
>
> On Mon, Dec 18, 2017 at 5:29 PM Makrand <ma...@gmail.com> wrote:
>
>> Hello Jagdish,
>>
>> What is source URL of template you're trying to register?
>>
>> And when exactly this error is appearing? Immediately after you try to
>> register a template?
>>
>>
>> --
>> Makrand
>>
>>
>> On Fri, Dec 15, 2017 at 1:01 PM, Jagdish Patil <jagdishpatil316@gmail.com
>> >
>> wrote:
>>
>> > Hey Guys,
>> >
>> > I am facing the following issue with this configuration:
>> >
>> > *Configuration:*
>> > CloudStack Version: 4.9
>> > OS: CentOS 6.8(X86_64)
>> > Hypervisor: KVM
>> > CIDR:24
>> >
>> > *Issue:*
>> >
>> > *Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1 with
>> > error: sun.security.validator.ValidatorException: PKIX path building
>> > failed: sun.security.provider.certpath.SunCertPathBuilderException:
>> unable
>> > to find valid certification path to requested target*
>> >
>> > There are solutions given by multiple peoples on the internet but none
>> of
>> > them are helping me. Please help.
>> >
>> > Thank You,
>> > Jagdish Patil,
>> > (B.Tech-Cloud Based Application: IBM)
>> > M:8735828606 <087358%2028606> <087358%2028606>
>> > E:jagdishpatil316@gmail.com
>> >
>>
>
Re: PKIX path building failed
Posted by Jagdish Patil <ja...@gmail.com>.
Thanks for responding Makrand,
This error is occurring as soon as system VM gets downloaded and started
and tries to download the CentOS5.5-KVM(No GUI) template. And I have also
tried giving other HTTP URLs for registering but still, the PKIX path
building error pops up.
I have attached a part of the log, have a look.
On Mon, Dec 18, 2017 at 5:29 PM Makrand <ma...@gmail.com> wrote:
> Hello Jagdish,
>
> What is source URL of template you're trying to register?
>
> And when exactly this error is appearing? Immediately after you try to
> register a template?
>
>
> --
> Makrand
>
>
> On Fri, Dec 15, 2017 at 1:01 PM, Jagdish Patil <ja...@gmail.com>
> wrote:
>
> > Hey Guys,
> >
> > I am facing the following issue with this configuration:
> >
> > *Configuration:*
> > CloudStack Version: 4.9
> > OS: CentOS 6.8(X86_64)
> > Hypervisor: KVM
> > CIDR:24
> >
> > *Issue:*
> >
> > *Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1 with
> > error: sun.security.validator.ValidatorException: PKIX path building
> > failed: sun.security.provider.certpath.SunCertPathBuilderException:
> unable
> > to find valid certification path to requested target*
> >
> > There are solutions given by multiple peoples on the internet but none of
> > them are helping me. Please help.
> >
> > Thank You,
> > Jagdish Patil,
> > (B.Tech-Cloud Based Application: IBM)
> > M:8735828606 <087358%2028606> <087358%2028606>
> > E:jagdishpatil316@gmail.com
> >
>
Re: PKIX path building failed
Posted by Makrand <ma...@gmail.com>.
Hello Jagdish,
What is source URL of template you're trying to register?
And when exactly this error is appearing? Immediately after you try to
register a template?
--
Makrand
On Fri, Dec 15, 2017 at 1:01 PM, Jagdish Patil <ja...@gmail.com>
wrote:
> Hey Guys,
>
> I am facing the following issue with this configuration:
>
> *Configuration:*
> CloudStack Version: 4.9
> OS: CentOS 6.8(X86_64)
> Hypervisor: KVM
> CIDR:24
>
> *Issue:*
>
> *Failed to register template: 4fe0b968-e02a-11e7-939c-f8a9632f48e1 with
> error: sun.security.validator.ValidatorException: PKIX path building
> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable
> to find valid certification path to requested target*
>
> There are solutions given by multiple peoples on the internet but none of
> them are helping me. Please help.
>
> Thank You,
> Jagdish Patil,
> (B.Tech-Cloud Based Application: IBM)
> M:8735828606 <087358%2028606>
> E:jagdishpatil316@gmail.com
>