Troubleshooting
Problem
Even after following complete steps listed at https://www.ibm.com/support/knowledgecenter/SS9LQB_1.1.6/LoadingData/t_asm_icp_configuringobservers.html , when you start Job for OpenStack Observer, Certificate chaining errors observed in the log.
Symptom
/opt/ibm/netcool/asm/logs/openstack-observer/openstack-observer.log has following
INFO [2019-11-01 14:48:50,609] [cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc] c.i.i.t.o.t.ObservationVertex - Backing up observation vertex Ericsson - VEPC
INFO [2019-11-01 14:48:50,617] [cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc] c.i.i.t.o.t.ObservationVertex - Existing backup observation vertex CTvJ5KIFQgaGNexrlJBsjA for Ericsson - VEPC.bak
INFO [2019-11-01 14:48:50,636] [cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc/KeystoneV3IdentityTask] c.i.i.t.o.o.j.r.v.t.AbstractTask - cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc/KeystoneV3IdentityTask - Starting...
INFO [2019-11-01 14:48:50,661] [cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc] c.i.i.t.o.o.j.r.OpenStackV3FullTopologyGetter - cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc - cancel - Cancelling Tasks, Shutting Down Executor...
ERROR [2019-11-01 14:48:50,663] [cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc] c.i.i.t.o.o.j.r.OpenStackV3FullTopologyGetter - cfd95b7e-3bc7-4006-a4a8-a73a79c71255:OpenStack - Ericsson - ceevepc - OpenStack task error occurred, rethrowing...
java.util.concurrent.ExecutionException: com.ibm.itsm.topology.observer.openstack.job.OpenStackTaskProcessingException: An error occurred while processing KeystoneV3IdentityTask:- javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=IBMSubCA01, DC=IBM, DC=com, DC=Raleigh is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at java.util.concurrent.FutureTask.report(FutureTask.java:133)
at java.util.concurrent.FutureTask.get(FutureTask.java:203)
at com.ibm.itsm.topology.observer.openstack.job.rest.OpenStackV3FullTopologyGetter.waitForFutures(OpenStackV3FullTopologyGetter.java:155)
at com.ibm.itsm.topology.observer.openstack.job.rest.OpenStackV3FullTopologyGetter.go(OpenStackV3FullTopologyGetter.java:107)
at com.ibm.itsm.topology.observer.openstack.job.rest.FullRESTLoadJob.observe(FullRESTLoadJob.java:85)
at com.ibm.itsm.topology.observer.app.ObservationJob.call(ObservationJob.java:179)
at com.ibm.itsm.topology.observer.app.ObservationJob.call(ObservationJob.java:63)
at com.ibm.itsm.topology.service.utils.InstrumentedVisibleExecutorService.wrapCallable(InstrumentedVisibleExecutorService.java:385)
at com.ibm.itsm.topology.service.utils.InstrumentedVisibleExecutorService.access$400(InstrumentedVisibleExecutorService.java:65)
at com.ibm.itsm.topology.service.utils.InstrumentedVisibleExecutorService$InstrumentedCallable.call(InstrumentedVisibleExecutorService.java:345)
at java.util.concurrent.FutureTask.run(FutureTask.java:277)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
at java.lang.Thread.run(Thread.java:812)
Caused by: com.ibm.itsm.topology.observer.openstack.job.OpenStackTaskProcessingException: An error occurred while processing KeystoneV3IdentityTask:- javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by CN=IBMSubCA01, DC=IBM, DC=com, DC=Raleigh is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.itsm.topology.observer.openstack.job.rest.v3.task.KeystoneV3IdentityTask.process(KeystoneV3IdentityTask.java:43)
at com.ibm.itsm.topology.observer.openstack.job.rest.v2.task.AbstractTask.call(AbstractTask.java:45)
at com.ibm.itsm.topology.observer.openstack.job.rest.v2.task.AbstractTask.call(AbstractTask.java:22)
at java.util.concurrent.FutureTask.run(FutureTask.java:277)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:522)
at java.util.concurrent.FutureTask.run(FutureTask.java:277)
at com.ibm.itsm.topology.service.utils.InstrumentedVisibleExecutorService.wrapRunnable(InstrumentedVisibleExecutorService.java:406)
at com.ibm.itsm.topology.service.utils.InstrumentedVisibleExecutorService.access$200(InstrumentedVisibleExecutorService.java:65)
at com.ibm.itsm.topology.service.utils.InstrumentedVisibleExecutorService$InstrumentedRunnable.run(InstrumentedVisibleExecutorService.java:317)
... 3 common frames omitted
Document Location
Worldwide
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SS9LQB","label":"Netcool Agile Service Manager"},"Component":"OpenStack Observer","Platform":[{"code":"PF043","label":"Red Hat"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Historical Number
TS002906119
Was this topic helpful?
Document Information
Modified date:
09 May 2025
UID
ibm11102869