Web service data action - Certification HTTPS

Dears,

I am trying to integrate with data actions based on HTTPS with Token, which I place in the header in (Action/Configuration/Request).

However, I receive the following error:

{
"status": 500,
"code": "internal.server.error",
"message": "The server encountered an unexpected condition which prevented it from fulfilling the request.",
"messageParams": {},
"contextId": "46e9acb4-f474-46fd-b063-e956170e9806",
"details": [],
"errors": [
{
"status": 500,
"code": "INTERNAL_SERVER_ERROR",
"message": "REST call for action execute failed. Message:Unable to send message after 2 attempts, due to: SunCertPathBuilderException: unable to find valid certification path to requested target [46e9acb4-f474-46fd-b063-e956170e9806]",
"messageParams": {},
"details": [],
"errors": []
}
]
}

The error as it is shown is more related to "unable to find valid certification path to requested target".

So, I think it is because of SSL certification. Is there any way from PureCloud to disable this?
Any ideas to solve this issue?

Thank you and best regards,
Ali

I believe this error means the service you're calling doesn't have a valid SSL cert, or the cert isn't from a trusted CA. Can you verify the cert your service is using and use a cert from a trusted CA if it isn't already?

1 Like

Dear Tim,

So this means the error is not related to the token I am using? Nor to Input Contracts,Output contracts, Request Configuration, or Response Configuration I am using?

So this means the error is not related to the token I am using? Nor to Input Contracts,Output contracts, Request Configuration, or Response Configuration I am using?

Correct.

The issue is that you are trying to use a self-signed cert. The site needs to have a cert signed by a recognized authority. We currently have no plans to support self-signed certificates.

1 Like

Thank you very much, Tom.

Thank you very much, Jason.

Dear Tim,

We asked our customer to have a valid SSL Certification. And now, they have updated their the certification.
However, I still have an error message when try to test API as shown below.

{
  "status": 500,
  "code": "internal.server.error",
  "message": "The server encountered an unexpected condition which prevented it from fulfilling the request.",
  "messageParams": {},
  "contextId": "57aff783-1b24-4763-bdb4-80e8f5b45953",
  "details": [],
  "errors": [
{
  "status": 500,
  "code": "INTERNAL_SERVER_ERROR",
  "message": "REST call for action execute failed. Message:Unable to send message after 2 attempts, due to: SunCertPathBuilderException: unable to find valid certification path to requested target [57aff783-1b24-4763-bdb4-80e8f5b45953]",
  "messageParams": {},
  "details": [],
  "errors": []
}
  ]
}

However, I am not sure if this error is still because of CA or something else.
Please, in case this error appears because distrusted CA, please, let us know if Genesys have a specific list of trusted CAs, or requirements.

Your help is appreciated.
Thank you and best regards,
Ali

Ali,

I investigated your issue and it looks like it's a problem with the certificate chain on your web server. You can run an analysis on your site by going to https://www.ssllabs.com/ssltest/index.html and entering your site. When I checked, I saw a problem in the "Certification Paths" section where the 2nd step required an extra download (which would not happen when executing an action).

The fix for this should be a change in your webserver config to include the full certificate chain. It appears that your web server is Apache. I'm not an expert at configuring Apache servers, but this forum post lists an SSL config generator that should provide the needed template to set up the correct configuration. https://community.letsencrypt.org/t/recommended-apache-config/58294

Try that and let us know if that resolves your issue.

Thanks
-Chris

1 Like

Dear Chris,

I would like to thank you regarding your feedback with the useful information and helpful guidance.

Best Regards,
Ali

This topic was automatically closed 31 days after the last reply. New replies are no longer allowed.