This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Workflow Error

Hello All,

I am working on 2 level resource request approval Workflow, when i request for resource from user application, Start of workflow fails and i was able to see resource request status as : Pending Approval: Pending Approval Retry in user application.

I couldn't find any start status of workflow in the logs, When i looked at logs of Roles and resource driver i am able to see the below error.

DirXML Log Event -------------------
Driver: \IDV\system\driverset1\Role and Resource Service Driver
Channel: Subscriber
Status: Error
Message: Unable to start Approval Workflow
Workflow DN: cn=AccountWF,cn=RequestDefs,cn=AppConfig,cn=UserApplication,cn=driverset1,o=system
Reason: java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

Note: This error is coming only for this workflow, for the rest it was not showing any error and all the trusted root certificates are placed correctly.

Can someone suggest me how to fix this issue.


Regards,
Eswar.
Parents
  • 0
    ed00491298;2463783 wrote:


    DirXML Log Event -------------------
    Driver: \IDV\system\driverset1\Role and Resource Service Driver
    Channel: Subscriber
    Status: Error
    Message: Unable to start Approval Workflow
    Workflow DN: cn=AccountWF,cn=RequestDefs,cn=AppConfig,cn=UserApplication,cn=driverset1,o=system
    Reason: java.lang.RuntimeException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

    Note: This error is coming only for this workflow, for the rest it was not showing any error and all the trusted root certificates are placed correctly.


    Dear Eswar,

    Did we recently imported https/ssl certificate for Identity Applications, or upgraded to https from http? Kindly ensure those application/server certificates are in place (keystore to check #/opt/novell/eDirectory/lib64/nds-modules/jre/lib/security/cacerts).

    Also kindly refer another forum thread which had similar issue and got it working #https://forums.novell.com/showthread.php/504485-Unable-to-start-Approval-Workflow-SSLHandshakeException?p=2461767#post2461767
  • 0 in reply to 
    Hi Siva,

    Thank you for the quick response.

    All the application/server certificates are in place and other workflows are working as expected and there are no errors.

    Why it shows the error only for the workflow which i am working on.

    If any of the certificates are missing it should show the same error for remaining workflows as well but didn't.

    Br,
    Eswar.
  • 0   in reply to 
    On 8/9/2017 9:04 AM, ed00491298 wrote:
    >
    > Hi Siva,
    >
    > Thank you for the quick response.
    >
    > All the application/server certificates are in place and other workflows
    > are working as expected and there are no errors.
    >
    > Why it shows the error only for the workflow which i am working on.
    >
    > If any of the certificates are missing it should show the same error for
    > remaining workflows as well but didn't.


    If that is the case, could you please show trace of the
    Do-Start-Workflow call for a working example and a not working example.
    (I would ask that you obfuscate the URL but in fact, that is what I want
    to see, is the URL, so if you do change it, please do it as a search and
    replace to acme.com so that it shows any difference in URL).

Reply
  • 0   in reply to 
    On 8/9/2017 9:04 AM, ed00491298 wrote:
    >
    > Hi Siva,
    >
    > Thank you for the quick response.
    >
    > All the application/server certificates are in place and other workflows
    > are working as expected and there are no errors.
    >
    > Why it shows the error only for the workflow which i am working on.
    >
    > If any of the certificates are missing it should show the same error for
    > remaining workflows as well but didn't.


    If that is the case, could you please show trace of the
    Do-Start-Workflow call for a working example and a not working example.
    (I would ask that you obfuscate the URL but in fact, that is what I want
    to see, is the URL, so if you do change it, please do it as a search and
    replace to acme.com so that it shows any difference in URL).

Children
No Data