E-Series unable to deliver Autosupport due to unable to find valid certificate path error
Applies to
- E-Series
- SANtricity OS 11.70.4R1P1
- StorageGRID Appliance SG5760
- Autosupports configured with HTTPS protocol
Issue
- Unable to configure Autosupport using HTTPS protocol and Test fails.
- Web-Server Trace Log:
2024-02-13 16:45:13,021 INFO [SMMonitorTask-479] trace [ASUPTask.java:1282] [requestId=0, deviceId=N/A] ASUP task start, task: AUTO_SUPPORT_AOD_QUERY, source: AUTO_SUPPORT_DAILY_SCHEDULE
2024-02-13 16:45:15,136 INFO [SMMonitorTask-479] trace [ASUPHTTPClient.java:1022] [requestId=0, deviceId=N/A] Connecting to HTTPS server: support.netapp.com:443, IP 216.240.21.18
2024-02-13 16:46:38,876 WARN [SMMonitorTask-479] c.l.a.w.u.ChainedTrustManager [ChainedTrustManager.java:239] [requestId=0, deviceId=N/A] CertificateException caught:
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
at java.base/sun.security.provider.certpath.RevocationChecker.checkOCSP(RevocationChecker.java:743)
Wrapped by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
at java.base/sun.security.validator.Validator.validate(Validator.java:264)
- Verified E-Series AutoSupport delivery fails due to firewall block and there is no firewall or network issue observed.
- Test
wget https://support.netapp.com/put/AsupPut/
andwget http://support.netapp.com/put/AsupPut/
is successful. - Validated E-Series AutoSupport not working on any protocol