Calendar Publishing Error

Mods, Tips, Tricks, and Support for Zulu
Posts: 45
Joined: Sat Jul 09, 2011 3:41 pm
PostPosted: Wed Nov 23, 2011 1:37 pm
Recently, I have messed around with installing and reinstalling a self signed certificate on my OSX server I get the Error when publishing:

Calendar Publishing Error

java.sql.SQLException: Could not connect to database: Server has moved to new location: https://localhost/fmi/xml/FMPXMLRESULT.xml


I can call localhost/zulu
If i click Testconfiguration it says
Google sync will not function until one or more FileMaker accounts are configured
✓ Zulu is communicating successfully with Web Publishing Engine running on localhost (ssl: false)


Where the "ssl=false" part might be part of the problem.
Does anyone see what I do wrong?
yours
Pierre
Posts: 45
Joined: Sat Jul 09, 2011 3:41 pm
PostPosted: Thu Nov 24, 2011 8:25 am
OK.. so I found your Docs explaining how to enable ssl security http://www.seedcode.com/pmwiki/pmwiki.php?n=Zulu.Security.

However now I get this error
Calendar Publishing Error

java.sql.SQLException: Could not connect to database: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


My certificate is a self signed certificate. Even nomal browser ask before entering our site.
Any hints?
Posts: 45
Joined: Sat Jul 09, 2011 3:41 pm
PostPosted: Thu Nov 24, 2011 9:38 am
Ok.. I found out that I have to "redeploy" the fm server app after I installed the certificate, choose https and port 443.
Then I had to reinstall the newest version 1.307, the change the localhost.xml file to "use all ="true"

But it still gives me the error
Calendar Publishing Error

java.sql.SQLException: Could not connect to database: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


Please help.yours
Pierre
SeedCode Staff
SeedCode Staff
Posts: 2764
Joined: Thu Nov 20, 2003 11:01 am
PostPosted: Thu Nov 24, 2011 10:28 am
Hi Pierre,

Sorry for the late reply, we're out until Monday here, but if you may have already found this... http://www.seedcode.com/pmwiki/pmwiki.php?n=Zulu.Security
...it should help. I'm not a webserver expert so I can't help you config the web server but I suspect that self signed certificates won't work as there is no way for the iCal client to accept them.

Hope that helps,

John
John Sindelar
SeedCode
Posts: 45
Joined: Sat Jul 09, 2011 3:41 pm
PostPosted: Thu Nov 24, 2011 12:12 pm
Well John,
Apple has services on their server that do not work well without a certificate, they somehow expect one.
Ical has an option for SSL (it is a checkbox).
A certificate costs some 300USD for 3 years..
You don't think that it should be possible?
Yours
Pierre
SeedCode Staff
SeedCode Staff
Posts: 2764
Joined: Thu Nov 20, 2003 11:01 am
PostPosted: Thu Nov 24, 2011 12:29 pm
Like I said Pierre, I'm not a server expert and I've never used a self signed cert. Wish I had more to suggest.
John Sindelar
SeedCode
Posts: 45
Joined: Sat Jul 09, 2011 3:41 pm
PostPosted: Thu Nov 24, 2011 3:54 pm
yeah
i deinstalled the certificate and everything went back to normal. I just installed it anyway because somebody told me that lion server works better with one installed.
so... no more certificates.. I mean , who am I anyway,, the CIA. hope i do not need the security

p
SeedCode Staff
SeedCode Staff
Posts: 691
Joined: Mon Feb 28, 2011 2:47 pm
PostPosted: Mon Dec 12, 2011 9:08 am
From a passing stranger:

Error:
I can acces the https://mydomain.com/zulu/ without problems, but when I try to publish a calender with SSL I get this error:

-----------------------------------
Calendar Publishing Error
java.sql.SQLException: Could not connect to database: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
-----------------------------------

Reason:
The Java 6 engine (used by tomcat that filemaker uses) on the osx lion cant find your ssl certificate. Java engine does not look for a certificate in the usual apache osx server keystore file. It uses its own keystore file called Cacerts. The location may vary depending on osx version. So when you connect, it cant find a certificate in the keystore file (keystore file is like a vaultwhere you can store certificates) because there is none. The solution is to import a proper signed certificate in to the Cacerts file so that it can be found by Filemaker and the Seecode.

Before you start:
1. Change filemaker seecode script (publish calander) to ssl: Yes and a correct server adress that correspond with your server certificate, yourdomain.com probably
2. Edit the zulu.xml according to ssl documents from seedcode. http://www.seedcode.com/pmwiki/pmwiki.p ... u.Security
By terminal its $Sudo nano \FileMaker Server\Web Publishing\publishing-engine\cwpe-tomcat\conf\Catalina\localhost\zulu.xml


Solution:
1. Make sure you have a proper signed ssl certificate intsalled for web in server.app.
2. Export it from your keychain acces.app so that you get a file called something.cer
3. Start terminal.app
4. Run $ Sudo Keytool -import -alias yourdomain.com -file /example/folder/path/yourcertificate.cer -keystore /system/library/Java/Support/CoreDeploy.bundle/Contents/home/lib/security/Cacerts
5. Enter system password for the sudo command
6. Enter Cacerts password, default is: changeit
7. You will get a long text and a will you trust this question. Say yes.
8. It should say Certificate has been added to keystore-file

and your done.


Tips.
Sudo: gives acces as root
Keystore: File where you can store certificates
Nano: Text edit file in terminal
File paths: you can drag a file in to the terminal window to get a 100% correct adress
Alias: All certificates are called by an alias, you can choose whatever, but the same name as the certificate is good.
Posts: 1
Joined: Wed May 09, 2012 10:14 am
PostPosted: Fri Jun 08, 2012 11:21 am
Jason,
Thanks for this succinct solution. This procedure solved a problem I was having with OS X Lion and FileMaker Server 12. We weren't having any troubles with Zulu necessarily (not on this server anyway :) ), but were getting the "PKIX path building failed" error from Java when we tried to setup/deploy the web server on FM12.

Thanks!

-- J
SeedCode Staff
SeedCode Staff
Posts: 691
Joined: Mon Feb 28, 2011 2:47 pm
PostPosted: Fri Jun 08, 2012 11:34 am
Nobody copies and pastes like I do! 8)

Return to Zulu: iCal Server for FileMaker

Who is online

Users browsing this forum: No registered users and 2 guests

(855) SEEDCODE
[email protected]
Follow us: