1 of 1 people found this helpful
Sounds like to me there might be a issue with the certificate you're using. Does Chrome use a different certificate store than Windows does? (I know Edge and IE use Window's certificate store).
I know on Firefox (my daily driver) when I use unsigned certificates I have to import it directly into Firefox, just importing it into the OS doesn't work.
Will check if the chrome uses different certificate store.For certificates I got the certificate from internal enterprise certification authority. I created a keystore and used keytool to import the certificate into the keystore and in the windows store(using mmc)
Not sure what am I missing or what went wrong
The Windows "certmgr" is used by the OS to store certificates. The client application still has to use that in order for it to make any impact. I know Firefox has its own certificate manager.
As you can see in this example I have several remedy labs I've used where I had to import these certificates into the Firefox certificate manager. I've never imported this into the Windows manager as I never use IE or Edge. I assume the same will be true for Chrome.
In that same way, Java does not use the Windows certificate manager in the same way either. It has its own keystore.
correct, java has its own cert manager "cacerts" where all the certs are stored. but whats puzzling me is that I can access remedy mid tier, dwp,smartit using https in chrome without importing any of these certs in browser. the issue only seems to be with cmdb portal. Not sure if there is some other settings for jetty ssl to be accessible in chrome.
Can you try accessing the ar server directly and not via loadbalancer?
Is there a difference when you use ip address of lb/ars instead of name?
Have you tried in incognito mode aswell?
Tried to access the url from within the server but still same behavior. tried in incognito mode too but still no luck. nothing in the logs too.
tried to create new keystore using java keytool and kse guo but nothing helped. finally raised ticket with bmc support. no clue whats going wrong.