xDM

Hello All,

My team is working through the move from 3rd party hosting of Semarchy xDM to environments that we have deployed to our Azure subscription.  Our hosted environment is through a consulting partner's AWS subscription(app server is running on EC2 VM).  Our new app servers are running in an Azure Kubernetes cluster inside my company's Azure subscription.  During systems integration testing of the new Azure environments, we are encountering the following error related to the Melissa java plugin(pasted below).  I wasn't involved with the initial setup of our Azure environments.  Has anyone encountered this error while standing up containerized Semarchy xdM in Azure?  Would this be a cert management issue for the semarchy java home, or something that needs to be addressed at the kubernetes cluster? 

Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Our solution was to run the key tool utility in the Semarchy/tomcat java home and install our root certificate(if just changed it to arbitrary "rootcert.pem" in the example Dockerfile below:

FROM semarchy/xdm:2024.1.1

USER root

ADD http://rootcert.rootcert.com/rootcert.pem /usr/share/ca-certificates/rootcert.pem

RUN echo "rootcert.pem" >> /etc/ca-certificates.conf

RUN \

  update-ca-certificates && \

  for cert in /usr/share/ca-certificates/*.pem; do \

    keytool \

      -noprompt \

      -import \

      -trustcacerts \

      -storepass whatevz \

      -file "$cert" \

      -alias $(basename "$cert" .crt) \

      -cacerts; \

  done

I was hoping that  we were fulling up and running in our new Azure Kubernetes home.  The cert error has been addressed, but now we are seeing timeouts from the melissa api: