Hexagon Geospatial
MENU

GeoMedia Smart Client

GeoMedia Smart Client community discussion board is where you can create, contribute and share information and knowledge in regards to configuring as well as working with GeoMedia Smart Client. Find your answers, share your knowledge and help build a strong GeoMedia Smart Client community.
Showing results for 
Search instead for 
Do you mean 
Reply
Super Contributor
Posts: 389
Registered: ‎10-12-2015
Accepted Solution

https - does ssl certificate need to be part of openJDK root certificate store?

Customer is running GMSC 2018 update 3 within intranet. We are introducing ssl.

Customer provided a SSL certificate signed by their own organisation, not an external ssl certificate provider.

 

When GMSC is launched it goes straight to offline mode.

Checking event viewer corresponding with time GMSC is launched is entry:

“A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 46.”

 

Log Name:      System

Source:        Schannel

Date:          20/11/2018 10:39:10 a.m.

Event ID:      36887

Task Category: None

Level:         Error

Keywords:     

User:          SYSTEM

Computer:      WDCWM1TEST.waitakidc.govt.nz

Description:

A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 46.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />

    <EventID>36887</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8000000000000000</Keywords>

    <TimeCreated SystemTime="2018-11-19T21:39:10.216950600Z" />

    <EventRecordID>1469854</EventRecordID>

    <Correlation />

    <Execution ProcessID="508" ThreadID="4260" />

    <Channel>System</Channel>

    <Computer>WDCWM1TEST.waitakidc.govt.nz</Computer>

    <Security UserID="S-1-5-18" />

  </System>

  <EventData>

    <Data Name="AlertDesc">46</Data>

  </EventData>

</Event>

 

Is it possible that their is some sort of relationship between the Java client openjdk root certificate store (cacerts) and the IIS https / ssl certificate? i.e. any reason the ssl certificate would have to be added to the client java cacerts?

 

Given java is a client that seems a stretch, but there are some online articles indicating that might be required. Or perhaps that is just code signing certificates?

 

Note: so far we have only tested launching on the server itself as we don't have privilages to deploy new hexagon launcher in customers desktop environment. Server is 2012 R2.

Technical Evangelist
Posts: 148
Registered: ‎10-20-2015

Re: https - does ssl certificate need to be part of openJDK root certificate store?

Hi Shaun,

no, there is no relation between your event viewer issue and the OpenJDK certificates.

 

What happens if you open the AuthorizationService WSDL? http://YOUR_SERVER/GMSC/Authorization.svc?wsdl

 

Can it be called without errors?

 

In addition please consider the following articel:

https://community.hexagongeospatial.com/t5/GMSC-Tutorials/How-to-use-GeoMedia-Smart-Client-with-HTTP...

 

If the WSDL can be shown without issues and you still encounter issues, please request a new setup (16.5.320.2) from the support team. 

 

Best Regards,

Steve

 

 

Highlighted
Super Contributor
Posts: 389
Registered: ‎10-12-2015

Re: https - does ssl certificate need to be part of openJDK root certificate store?

Thanks Steve, great to eliminate any possibility of SSL cert being part of Java cert store.

 

Client has now setup another cerficate and we are operational. Looks like original certificate was bad.

Technical Evangelist
Posts: 148
Registered: ‎10-20-2015

Re: https - does ssl certificate need to be part of openJDK root certificate store?

Perfect, that's nice to hear.

Do you need immediate support?
If you encounter a critical issue and need immediate assistance please submit a Service Request through our Support Portal.