Integration Studio - PKIX Path Error for generic REST rules using SMAX endpoint

Hi everyone,

After upgrading from SMAX 24.1 to 24.4, we encountered an issue with Integration Studio. We have scenarios using a SMAX endpoint connected to the same tenant, mapped to both a SMAX connector and a Generic connector.

Since the upgrade, Generic REST request rules that previously worked now fail with the following error:

{"code":-1,"originalCode":401,"error":"org.springframework.web.client.ResourceAccessException: I/O error on POST request for \"https://<FQDN>/auth/authentication-endpoint/authenticate/token\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target","headers":null,"result":null,"originalResponse":null}

The SMAX connector rules are working fine, and the certificate configured in the endpoint is up-to-date. This issue seems specific to Generic REST rules.

Has anyone experienced this or have suggestions to resolve it?

Thank you.

  • Suggested Answer

    0  

    Hi Avi,

    I'm not aware anything has changed from the Integration Studio side for how the Generic connector works, When you upgraded SMAX if the certificates got updated in order to go from 24.1 to 24.4 then this would have an effect on the integration. If the correct root CA certificate has been placed within the configuration of the Generic Connector then the connector should work. If there is a mismatch within the SMAX configuration and what is held in the Integration Engine it might be worth trying to restart the Integration studio pod and seeing if the Connector works after that.

    Another test to try is if you setup a new Connector as Generic does that work just in case something has got screwed up.

    The error message is certainly complaining about the Certificate, so I'd certainly double check the Generic connector certificate configuration just to be 100% sure that isn't causing you the issue. For example do you have an intermediate CA as well as the Root CA that needs to be used?

    Thanks,

    Dave