Steps to check the SSL certificate validatity in Service Manager (SM).

SSL

Knowledgebase Id: KM00516795

 

Steps to check the certificate validity in Service Manager (SM).

Error indicate certificate has expired

ERROR TP-Processor7 com.hp.ov.sm.client.webtier.SCLogging – Apr 25, 2013 19:51:38 IST [ERROR] SOAP Failure –

Message send failed -sun.security.validator.ValidatorException: PKIX path validation failed:

java.security.cert.CertPathValidatorException: timestamp check failed

Response
Steps to check the expiration date through the Java keytool program, which can print out the details of the certificate.

1. Copy the keytool program from the Java JRE or JDK \bin directory to the \RUN directory of the SM server,

2. Run the following command from the \RUN directory command line : keytool -list -v -keystore smsrv.keystore, on the password question, just click ‘Enter’, as the certificate has no password,

The out put looks like this :

***************** WARNING WARNING WARNING *****************
* The integrity of the information stored in your keystore *
* has NOT been verified! In order to verify its integrity, *
* you must provide your keystore password. *
***************** WARNING WARNING WARNING *****************
Keystore type: jks
Keystore provider: SUN
Your keystore contains 1 entry
Alias name: tomcat
Creation date: Jun 6, 2007
Entry type: keyEntry
Certificate chain length: 2
Certificate[1]:
Owner: CN=SM7SERVER, OU=SM Server, O=HP, L=SD, ST=CA, C=US
Issuer: CN=HP ServiceManager Private CA, OU=TSG SM Software, O=Hewlett-Packard Co., L=San Diego, ST=CA, C=US
Serial number: ee3fa86df5ec15c5
Valid from: Wed Jun 06 07:11:25 CEST 2007 until: Sat Jun 05 07:11:25 CEST 2010
Certificate fingerprints:
MD5: 59:0F:AE:35:2A:FD:CF:B8:4F:EC:93:B2:F1:AF:AB:ED
SHA1: 92:48:4E:08:EE:1F:B8:9F:57:7E:E3:3E:7B:89:9D:93:F5:FE:89:A6
Certificate[2]:
Owner: CN=HP ServiceManager Private CA, OU=TSG SM Software, O=Hewlett-Packard Co., L=San Diego, ST=CA, C=US
Issuer: CN=HP ServiceManager Private CA, OU=TSG SM Software, O=Hewlett-Packard Co., L=San Diego, ST=CA, C=US
Serial number: f17e14dbab4249a9
Valid from: Wed Jun 06 07:08:16 CEST 2007 until: Sat Jun 05 07:08:16 CEST 2010
Certificate fingerprints:
MD5: FB:45:95:6E:36:E3:5E:70:F2:76:7E:1F:16:94:4E:CA
SHA1: 38:87:D7:A6:35:8E:65:70:84:C8:17:89:54:2E:59:4A:2C:8C:A4:69

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s