-
1. Re: API stopped working after applying SSL to REST API
LJ LongWingMay 8, 2018 3:23 PM (in response to Edison Pioneer)
You'll need to provide more information than 'it stopped working'....what are the errors, are there any logs?
-
2. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 9, 2018 12:42 AM (in response to LJ LongWing)Hi LJ,
What logs should I be taking?
API+Fltr+SQL?
Should I be looking into arerror.log as well?
Need I replicate the issue? As in, revert back to pre-SSL and again apply SSL while collecting logs?
Please let me know in case I am missing out on something.
Thanks.
-
3. Re: API stopped working after applying SSL to REST API
Carl WilsonMay 9, 2018 7:06 AM (in response to Edison Pioneer)
Hi,
I think LJ also means things such as:
- Is this a Self Signed Certificate or a chained Authority based Certificate?
- What is the configuration changes you made to Jetty, and did you validate the certificates?
- What do the Jetty logs show for the actual issue?
There is differences that are not listed in the BMC instructions for Authority based Certificates, they only list how to create a Self Signed Certificate keystore and point the Jetty configuration to this - so know the exact steps you did to create the keystore and update the configuration, etc would help.
Cheers
Carl
-
4. Re: API stopped working after applying SSL to REST API
LJ LongWingMay 9, 2018 8:54 AM (in response to Carl Wilson)
Yes...but also 'when I try to hit the url I get 'this'.....what do you get....what's in your jetty logs...'doesn't work' doesn't tell us ANYTHING other than it's not working...we need to know what errors you are getting in what log files to be able to try and help you out.
-
5. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 9, 2018 4:29 PM (in response to LJ LongWing)Hi LJ,
I have updated the main discussion part, and also attached snippets from arerror logs.
Will try gathering the jetty logs tomorrow.
Thanks for your interest. Let me know if you find anything or anything more is required.
-
6. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 9, 2018 4:31 PM (in response to Carl Wilson)Hi Carl,
I can find out only tomorrow if the certificate was self signed or issued by a CA.
For now, I have updated the main discussion part and attached snippets from arerror log.
Would you please check and revert your feedback?
Thanks for taking interest
-
7. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 10, 2018 7:13 AM (in response to LJ LongWing)Hi LJ,
I am about to gather jetty logs following the instructions in DOC 50147 below. This requires making changes to jetty.xml and then restarting the server.
https://communities.bmc.com/docs/DOC-50147
However, DOC 96343 has also come to my attention. It details on how to gather REST API logs. We need to make changes to logback_server.xml
https://communities.bmc.com/docs/DOC-96343
Just wanted to have your feedback if I should follow DOC 96343 as well to gather REST API logs?
Thanks.
-
8. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 10, 2018 7:13 AM (in response to Carl Wilson)Hi Carl,
I am about to gather jetty logs following the instructions in DOC 50147 below. This requires making changes to jetty.xml and then restarting the server.
https://communities.bmc.com/docs/DOC-50147
However, DOC 96343 has also come to my attention. It details on how to gather REST API logs. We need to make changes to logback_server.xml
https://communities.bmc.com/docs/DOC-96343
Just wanted to have your feedback if I should follow DOC 96343 as well to gather REST API logs?
Thanks.
-
9. Re: API stopped working after applying SSL to REST API
LJ LongWingMay 10, 2018 8:14 AM (in response to Edison Pioneer)
Correct me if I'm wrong please, but when you go from HTTP to HTTPS, you typically don't stay on the same port. Looking at the default configs 8008 is the default HTTP port, and the default HTTPS port is 8443....did you define the https port as 8008, or is it defined as 8443 and you are hitting a now non-configured port?
-
10. Re: API stopped working after applying SSL to REST API
Danny KellettMay 10, 2018 11:30 AM (in response to Edison Pioneer)
Not sure if this is a type but the third and forth URLs have period / full stops and not colons.
Kind regards
Danny
-
11. Re: API stopped working after applying SSL to REST API
LJ LongWingMay 10, 2018 11:58 AM (in response to Danny Kellett)
good catch....didn't see that myself but you are correct....those are periods and not colons....
-
12. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 10, 2018 12:11 PM (in response to LJ LongWing)Hi LJ,
Thanks for pointing this out!
Do we need to mention the HTTPS confidential port - 8443 only in the web link , or make any changes to other files as well?
I am planning to check the jetty.xml and jetty-selector.xml file tomorrow since the configuration was made by another person, and hes not available now.
Thanks.
-
13. Re: API stopped working after applying SSL to REST API
Edison Pioneer May 10, 2018 12:12 PM (in response to Danny Kellett)Thanks Danny
-
14. Re: API stopped working after applying SSL to REST API
Carl WilsonMay 10, 2018 12:18 PM (in response to Edison Pioneer)
Hi,
The port that you specify for HTTPS is set in the jetty configuration, so
it can be any port not in use and does not have to be a "standard" HTTPS
port.
Cheers
Carl