Mission Control shows a ValidatorException when adding an Artifactory instance

ISSUE: 

Mission Control shows a ValidatorException when adding an Artifactory instance.

REASON:

Mission Control is a regular Java App that runs on JVM. If you are attempting to add an Artifactory instance and encountering the “sun.security.validator.ValidatorException” SSL related error, it is most likely because the Artifactory instance you are trying to add is proxied by a privately-signed/self-signed certificate equipped Webserver. If this is indeed the case, you will need to import the certificate (that is used by the Webserver) to the Truststore of the Java installation which Mission Control is using. 


RESOLUTION

1. Get your Webserver’s root and intermediate certificates by running openssl s_client -showcerts -connect <REMOTE_URL>

2. Save each certificate as a file

For example, 

 s:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=Entitlement Master CA/emailAddress=ca-support@redhat.com

 i:/C=US/ST=North Carolina/L=Raleigh/O=Red Hat, Inc./OU=Red Hat Network/CN=Entitlement Master CA/emailAddress=ca-support@redhat.com

The example above indicates that the issuer (i:) is the same as the subject (s:), which indicates that it is the root certificate.

Save the hash of the certificate (include —–BEGIN CERTIFICATE—– and —–END CERTIFICATE—– ) and save it as root.crt .

3. Identify which Java installation Mission Control is using

4. Import root and intermediate certificates to the trusted root certificate of JAVA (usually called “cacerts”) by using keytool import command. For more information, please visit https://docs.oracle.com/cd/E19830-01/819-4712/ablqw/index.html

For example,

sudo keytool -importcert -keystore /usr/local/java/jdk1.8.0_60/jre/lib/security/cacerts -storepass changeit -file ~/Downloads/RHEL-cert/root.crt -alias “rhel-root”

5. Restart Mission Control