Question

Facing issue in calling REST Service call

0

Hi Team, I am new to the Mendix and I am trying to call REST API service only to get response and it is https service so I read inMendix document that we need client certificate and its password file. So I have certificate in .pfx format and i have generated its key file using openssl tool. so when I am running my app locally then getting below error at run time . Kindly Guide me in this. com.mendix.m2ee.api.AdminException: Starting Mendix Runtime failed. at com.mendix.basis.impl.MxRuntimeImpl.fireZeMissiles(MxRuntimeImpl.java:627) Caused by: java.io.IOException: keystore password was incorrect at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2108) at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222) at java.base/java.security.KeyStore.load(KeyStore.java:1479) at com.mendix.basis.conf.CertificateProcessor.setClientCertificates(CertificateProcessor.java:97) at com.mendix.basis.conf.CertificateProcessor.readCertificates(CertificateProcessor.java:46) at com.mendix.basis.impl.MxRuntimeImpl.readConfiguredCertificates(MxRuntimeImpl.java:705) at com.mendix.basis.impl.MxRuntimeImpl.fireZeMissiles(MxRuntimeImpl.java:620) at com.mendix.basis.impl.MxRuntimeImpl.start(MxRuntimeImpl.java:417) at com.mendix.m2ee.appcontainer.actions.StartAction.startRuntime(StartAction.java:49) at com.mendix.m2ee.appcontainer.actions.StartAction.execute(StartAction.java:31) at com.mendix.m2ee.appcontainer.server.handler.HttpAdminHandler.handle(HttpAdminHandler.java:129) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) at org.eclipse.jetty.server.Server.handle(Server.java:500) at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:383) at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:547) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:375) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:273) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:103) at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:117) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:336) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:313) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:171) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:129) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:375) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:806) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:938) at java.base/java.lang.Thread.run(Thread.java:834) Caused by: java.security.UnrecoverableKeyException: failed to decrypt safe contents entry: javax.crypto.BadPaddingException: Given final block not properly padded. Such issues can arise if a bad key is used during decryption. at java.base/sun.security.pkcs12.PKCS12KeyStore.engineLoad(PKCS12KeyStore.java:2108) at java.base/sun.security.util.KeyStoreDelegator.engineLoad(KeyStoreDelegator.java:222) at java.base/java.security.KeyStore.load(KeyStore.java:1479) at com.mendix.basis.conf.CertificateProcessor.setClientCertificates(CertificateProcessor.java:97) at com.mendix.basis.conf.CertificateProcessor.readCertificates(CertificateProcessor.java:46) at com.mendix.basis.impl.MxRuntimeImpl.readConfiguredCertificates(MxRuntimeImpl.java:705) at com.mendix.basis.impl.MxRuntimeImpl.fireZeMissiles(MxRuntimeImpl.java:620) at com.mendix.basis.impl.MxRuntimeImpl.start(MxRuntimeImpl.java:417) at com.mendix.m2ee.appcontainer.actions.StartAction.startRuntime(StartAction.java:49) at com.mendix.m2ee.appcontainer.actions.StartAction.execute(StartAction.java:31) at com.mendix.m2ee.appcontainer.server.handler.HttpAdminHandler.handle(HttpAdminHandler.java:129) at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) at org.eclipse.jetty.server.Server.handle(Server.java:500) at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:383) at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:547) at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:375) at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:273) at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311) at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:103) at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:117) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:336) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:313) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:171) at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:129) at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:375) at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:806) at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:938) at java.base/java.lang.Thread.run(Thread.java:834)

asked 2020-06-15

Shailja Khare

2 answers

Rom van Arendonk · Answer 1 · 2020-06-15

If you read your error message, it says: "Caused by: java.io.IOException: keystore password was incorrect ”.

I assume you are using the native REST implementation. When running locally, you could supply the certificate and its password through custom runtime settings, see this documentation page and the settings ClientCertificates and ClientCertificatePasswords. Note that in this scenario, you do not use a keystore.

[added]

In your new error message, it seems that the server uses a certificate which is not signed by a trusted certificate authority. Mendix is pretty picky about this (as opposed to e.g. Postman, where you can disable this check). You should get the certificate of the server and add that as the custom setting CACertificates, from the same documentation page as above.

Once you start deploying in the Mendix cloud, you can check out this documentation page to add your certificates (both client certificates and certificate authorities) through the UI.

Shailja Khare · Answer 2 · 2020-06-15

Hi,

Please find below screenshot in which I have given both parameters (clientCertificate and clientCertificatePassword) where i have done below settings :

clientCertificate = I have provided path of the certificate.pfx of my local C: drive (Is it correct to give C: drive path of my machine or somewhere else I have to store my certificate??)

clientCertificatePassword = I have given password directly to open the certificate (Should it be in file or direct password value needs to be provided)

Now I am getting below error :

com.mendix.modules.microflowengine.MicroflowException: Error calling REST service

at TC2.Microflow (CallRest : 'Call REST (GET)')

Advanced stacktrace:

at com.mendix.integration.actions.microflow.RestCallAction.execute(RestCallAction.scala:59)

Caused by: com.mendix.systemwideinterfaces.MendixRuntimeException: java.security.PrivilegedActionException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at com.mendix.integration.util.PrivilegedUtil$$anonfun$withPrivileged$2.applyOrElse(PrivilegedUtil.scala:17)

Caused by: java.security.PrivilegedActionException: null

at java.base/java.security.AccessController.doPrivileged(Native Method)

at com.mendix.integration.util.PrivilegedUtil$.$anonfun$withPrivileged$1(PrivilegedUtil.scala:13)

at scala.util.Try$.apply(Try.scala:213)

at com.mendix.integration.util.PrivilegedUtil$.withPrivileged(PrivilegedUtil.scala:13)

at com.mendix.http.LoggableHttpClient.execute(LoggableHttpClient.scala:26)

at com.mendix.integration.actions.microflow.RestCallAction.executeRequest(RestCallAction.scala:74)

at com.mendix.integration.actions.microflow.RestCallAction.execute(RestCallAction.scala:54)

at com.mendix.modules.microflowengine.microflow.impl.MicroflowObject.execute(MicroflowObject.java:47)

at com.mendix.modules.microflowengine.microflow.impl.MicroflowImpl.executeAfterBreakingIfNecessary(MicroflowImpl.java:215)

at com.mendix.modules.microflowengine.microflow.impl.MicroflowImpl.executeAction(MicroflowImpl.java:165)

at com.mendix.systemwideinterfaces.core.UserAction.execute(UserAction.java:46)

at com.mendix.basis.actionmanagement.CoreActionHandlerImpl.doCall(CoreActionHandlerImpl.scala:71)

at com.mendix.basis.actionmanagement.CoreActionHandlerImpl.call(CoreActionHandlerImpl.scala:49)

at com.mendix.core.actionmanagement.CoreAction.call(CoreAction.java:54)

at com.mendix.basis.actionmanagement.ActionManagerBase$1.execute(ActionManagerBase.java:147)

at com.mendix.util.classloading.Runner.doRunUsingClassLoaderOf(Runner.java:32)

at com.mendix.basis.actionmanagement.ActionManagerBase.executeSync(ActionManagerBase.java:152)

at com.mendix.basis.actionmanagement.MicroflowCallBuilderImpl.execute(MicroflowCallBuilderImpl.scala:40)

at com.mendix.webui.actions.client.ExecuteMicroflowAction.runMicroflow(ExecuteMicroflowAction.scala:76)

at com.mendix.webui.actions.client.ExecuteMicroflowAction.$anonfun$apply$3(ExecuteMicroflowAction.scala:42)

at com.mendix.webui.actions.client.RegularClientAction$Helpers$.$anonfun$liftEither$1(RegularClientAction.scala:29)

at com.mendix.webui.actions.client.RegularClientAction$Helpers$StateHandler.$anonfun$apply$4(RegularClientAction.scala:55)

at com.mendix.webui.requesthandling.helpers.StateHandling.withState(StateHandling.scala:35)

at com.mendix.webui.requesthandling.helpers.StateHandling.withState$(StateHandling.scala:32)

at com.mendix.webui.actions.client.RegularClientAction$Helpers$StateHandler.withState(RegularClientAction.scala:45)

at com.mendix.webui.actions.client.RegularClientAction$Helpers$StateHandler.apply(RegularClientAction.scala:53)

at com.mendix.webui.actions.client.RegularClientAction$Helpers$StateHandler.apply(RegularClientAction.scala:45)

at com.mendix.webui.actions.client.ExecuteMicroflowAction.apply(ExecuteMicroflowAction.scala:43)

at com.mendix.webui.actions.client.ExecuteMicroflowAction.apply(ExecuteMicroflowAction.scala:22)

at com.mendix.webui.actions.client.RegularClientAction.$anonfun$execute$3(RegularClientAction.scala:109)

at scala.util.Try$.apply(Try.scala:213)

at com.mendix.webui.actions.client.RegularClientAction.$anonfun$execute$2(RegularClientAction.scala:109)

at com.mendix.webui.actions.client.RegularClientAction.$anonfun$execute$2$adapted(RegularClientAction.scala:107)

at com.mendix.webui.requesthandling.helpers.ContextHandling.$anonfun$inContext$5(ContextHandling.scala:47)

at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.java:23)

at com.mendix.basis.actionmanagement.IMonitoredAction$$anon$1.execute(IMonitoredAction.scala:47)

at com.mendix.util.classloading.Runner.doRunUsingClassLoaderOf(Runner.java:32)

at com.mendix.basis.actionmanagement.IMonitoredAction.monitor(IMonitoredAction.scala:49)

at com.mendix.basis.actionmanagement.IMonitoredAction.monitor$(IMonitoredAction.scala:25)

at com.mendix.webui.requesthandling.helpers.ContextHandling$ClientMonitoredAction.monitor(ContextHandling.scala:59)

at com.mendix.webui.requesthandling.helpers.ContextHandling.inContext(ContextHandling.scala:47)

at com.mendix.webui.requesthandling.helpers.ContextHandling.inContext$(ContextHandling.scala:27)

at com.mendix.webui.actions.client.RegularClientAction.inContext(RegularClientAction.scala:86)

at com.mendix.webui.requesthandling.helpers.ContextHandling.inContext(ContextHandling.scala:24)

at com.mendix.webui.requesthandling.helpers.ContextHandling.inContext$(ContextHandling.scala:19)

at com.mendix.webui.actions.client.RegularClientAction.inContext(RegularClientAction.scala:86)

at com.mendix.webui.actions.client.RegularClientAction.$anonfun$execute$1(RegularClientAction.scala:107)

at scala.runtime.java8.JFunction0$mcV$sp.apply(JFunction0$mcV$sp.java:23)

at com.mendix.webui.requesthandling.helpers.ProfileHandling.profileRequest(ProfileHandling.scala:14)

at com.mendix.webui.requesthandling.helpers.ProfileHandling.profileRequest$(ProfileHandling.scala:10)

at com.mendix.webui.actions.client.RegularClientAction.profileRequest(RegularClientAction.scala:86)

at com.mendix.webui.actions.client.RegularClientAction.execute(RegularClientAction.scala:104)

at com.mendix.webui.requesthandling.ClientRequestHandler.handleAction(ClientRequestHandler.scala:104)

at com.mendix.webui.requesthandling.ClientRequestHandler.processRequest(ClientRequestHandler.scala:81)

at com.mendix.externalinterface.connector.RequestHandler.doProcessRequest(RequestHandler.java:40)

at com.mendix.external.connector.MxRuntimeConnector$1.execute(MxRuntimeConnector.java:76)

at com.mendix.external.connector.MxRuntimeConnector$1.execute(MxRuntimeConnector.java:73)

at com.mendix.util.classloading.Runner.doRunUsingClassLoaderOf(Runner.java:32)

at com.mendix.external.connector.MxRuntimeConnector.processRequest(MxRuntimeConnector.java:79)

at com.mendix.basis.impl.MxRuntimeImpl.processRequest(MxRuntimeImpl.java:988)

at com.mendix.m2ee.appcontainer.server.handler.RuntimeHandler.service(RuntimeHandler.java:42)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)

at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:755)

at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:547)

at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233)

at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1610)

at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233)

at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1300)

at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188)

at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:485)

at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1580)

at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186)

at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1215)

at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)

at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127)

at org.eclipse.jetty.server.Server.handle(Server.java:500)

at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:383)

at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:547)

at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:375)

at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:273)

at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311)

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:103)

at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:117)

at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:336)

at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:313)

at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:171)

at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:129)

at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:375)

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:806)

at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:938)

at java.base/java.lang.Thread.run(Thread.java:834)

Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)

at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:642)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:461)

at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:361)

at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:448)

at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:425)

at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:178)

at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:164)

at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1152)

at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1063)

at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:402)

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)

at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.upgrade(DefaultHttpClientConnectionOperator.java:191)

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.upgrade(PoolingHttpClientConnectionManager.java:392)

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:428)

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)

at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)

at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:108)

at com.mendix.http.LoggableHttpClient.$anonfun$execute$3(LoggableHttpClient.scala:26)

at com.mendix.integration.util.PrivilegedUtil$$anon$1.run(PrivilegedUtil.scala:14)