KB483352: An error occurs when deploying community connectors or fetching data under HTTPS mode

DescriptionWhen deploying community connectors or fetching data under HTTPS mode, you may encounter the error: Unable to find valid certification path to requested target. 

Why is this happening?

This occurs because you are using a self-sign certificate for HTTPS. It fails when the java procedure tries to verify the certificate in the SSL handshake stage between the community connectors server and the web server. A self-signed certificate should only be used internally or for dev purposes. 

Solution

To resolve this error, you need to assign the self-signed certificate to the JVM trust store.
Note: It's recommended to deploy the community-connectors.war file on the same machine as the web server. 

• Ensure the self-signed certificate of web server is signed to a domain of web server, such as localhost.
  

• Navigate to Strategy Web home page and download the certificate as tomcat.cer.
  
• Click the Not Secure icon in the URL.
• Click Certificate.
  

• In the Certificate dialog, select the Details tab. Show all certifies and click Copy to File.
  

• In the Certificate Export Wizard, select Base-64 encoded X.509 (.CER).
• Click Next.
  

• Name the file tomcat.cer.
• Click Next.
  

• Add tomcat.cer to the JVM trust store by running the following command: 
  

  keytool -importcert -keystore 

  "%JAVA_HOME%/jre/lib/security/cacerts"

   -file C:\path\to\tomcat.cer -trustcacerts -alias tomcat

  
  Note: If you have several versions of JDK or JRE, please identify the one your community-connectors.war file is using and modify the keystore path in the command accordingly.
  
• You are prompted to input your password, input

  "changeit"

  to trust the certificate.
• Restart tomcat.
• On the machine containing your Intelligence server, open regedit and navigate to HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\MicroStrategy\Common Files.
• Add the string, 

  JSDisableStrictSSL

  .
  

Additional Commands

When performing the above tasks, you may require additional commands:

To generate a key

keytool -genkey -keyalg RSA  -validity 3600

To add a key to the JVM trust store

keytool -importcert -keystore "%JAVA_HOME%/jre/lib/security/cacerts" -file C:\Users\jima\Desktop\jima.cer -trustcacerts -alias jima

To delete a key from the JVM trust store

keytool -delete -alias jima -keystore "%JAVA_HOME%\jre\lib\security\cacerts"