Webservice Calls failing due to java.security.cert.CertificateException: Certificate is not in CA store.

[ifxsmoser]

Dear Orchestrator Community!

In the current VRO Version we have the issue that the following error is thrown while doing HTTP REST calls (GET and POST):

InternalError: Cannot execute the request: ; java.security.cert.CertificateException: Certificate is not in CA store.

The problem we currently face is, that this is not consistent - over 90% of web calls work fine, some fail. We also cannot reproduce this issue on demand, but it happens still regularly with VRO 8.1.

We tried implementing a workaround auto fix that automatically tries to re-import the certificate. Most of the time this works, but sometimes the webservice call STILL fails even after the auto re-import.

It seems to me, as if the root issue is not the cert not being available in the cert store of VRO but instead the VRO process temporarily not being able to access the internal cert store.

Has anyone made similar experiences?

Any tips or pointers?

The VRO log is not helpful at all regarding this issue.

Thanks,

BR,

Steve

[ts-lcm]

Hi,

we are facing the same issue in our environments (7.6 & 7.31). If we try to reproduce it's working almost every attempt, but still no clue where the problem could be.

Updating the RestHost/re-importing the certificates seems to work (sometimes), but well that's not reliable at all.

BR

Peter

[KeziaDaryl]

Hi,

We are also facing the same issue in our env (vRO 8.1). A solution to this is much appreciated.