Xmlaccess export is failing after the WAS upgrade to 9.0.5.22/8.0.8.35

HCL Digital Experience Digital Experience Forum
,
1

EJPXB0006I: Connecting to URL https://localhost:8583/wps/config
EJPXB0004I: Writing output file /tmp/xmlaccess-23986598.xml
EJPXB0009E: Could not connect to portal.
EJPXB0016E: An error occurred on the client: Could not establish SSL connection to portal. SSLHandshakeException occured.
javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.k: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target

xmlaccess export is failing after the WAS upgrade to 9.0.5.22/8.0.8.35, it was working before the upgrade and WAS version was 9.0.0.5.

Any help would be appreciated.

2

Hello Sam,
the root-cause of that connectivity issue seems to be an SSL issue between the xmlaccess client application and the Portal server. Detailed SSL-Traces usually help to find out details. (trace-string: *=info:SSL=all). I would also add the generic jvm argument: -Djavax.net.debug=all on the Portal server side to check the problem in SSL negotiation point of view.

There can be different root-causes. One is that a certificate is maybe outdated. Another one is that a wrong SSL protocol version might be used.

If you have updated WAS recently it might be that you earlier used the SSL protocol version 1.1, which was marked to be weak from IBM. So you might want to check first the settings of your SSL protocol versions to make sure that you now use at minimum TLSv1.2 in all scopes. For details please also check:

https://support.hcl-software.com/community?id=community_question&sys_id=3b9717241b844d14534c4159cc4bcb0a

If you need further assistance I recommend to open an HCL case. Our support team can help you to find out more.

I hope that hints help you to resolve the problem.
with best regards
Thorsten

3

Hello Sam,
for your awareness, we have launched a new Digital Solutions Community site (https://developer.ds.hcl-software.com/) which includes our new product forums. The content for our legacy product forums will soon be migrated to this new site. If you haven’t yet done so, we encourage you to sign up on the site and engage with the community of experts for our products!