OnCommand Insight 7.x does not support devices using certificates with RSASSA-PSS signatures

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 62

Visibility:: Public

Votes:: 0

Category:: oncommand-insight

Specialty:: oci

Last Updated:

Applies to

OnCommand Insight (OCI) 7.x

Issue

The following message is displayed on the Data Source page, after clicking "Poll Again":

KB 1103640.png

The failure pattern in the logs will be similar to the following:

Failed to execute request: java.security.cert.CertificateException: Certificates do not conform to algorithm constraints and specifically: Caused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on signature algorithm: 1.2.840.113549.1.1.10 The string "1.2.840.113549.1.1.10" is synonymous with "RSASSA-PSS". Java versions below 13.0 do not have full support of this standard.