Federeted ArcGIS Server Base ArcGIS GeoEvent Server #12

Closed
opened 3 years ago by rbsetiawan · 1 comments
Owner

ArcGIS GeoEvenet Server befor Federeted

image
image

  • error : Close SendCallback@41a4e84f[PROCESSING][i=HTTP/1.0{s=403,h=2,cl=-1},cb=org.eclipse.jetty.server.HttpChannel$SendCallback@a568fe4] in state PROCESSING java.io.IOException: Close SendCallback@41a4e84f[PROCESSING][i=HTTP/1.0{s=403,h=2,cl=-1},cb=org.eclipse.jetty.server.HttpChannel$SendCallback@a568fe4] in state PROCESSING at org.eclipse.jetty.util.IteratingCallback.close(IteratingCallback.java:428) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.server.HttpConnection.onClose(HttpConnection.java:519) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.io.ssl.SslConnection.onClose(SslConnection.java:378) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.io.SelectorManager.connectionClosed(SelectorManager.java:345) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.io.ManagedSelector$DestroyEndPoint.run(ManagedSelector.java:1104) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883) [!/:9.4.43.v20210629] at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034) [!/:9.4.43.v20210629] at java.lang.Thread.run(Unknown Source) [?:?]

ArcGIS GeoEvenet Server after Federeted

image
image

# ArcGIS GeoEvenet Server befor Federeted ![image](/attachments/861ab9e8-811e-4680-8025-2659053564b7) ![image](/attachments/cfb59c4f-f38c-4188-9d3c-2cdb1f4321b2) - error : Close SendCallback@41a4e84f[PROCESSING][i=HTTP/1.0{s=403,h=2,cl=-1},cb=org.eclipse.jetty.server.HttpChannel$SendCallback@a568fe4] in state PROCESSING java.io.IOException: Close SendCallback@41a4e84f[PROCESSING][i=HTTP/1.0{s=403,h=2,cl=-1},cb=org.eclipse.jetty.server.HttpChannel$SendCallback@a568fe4] in state PROCESSING at org.eclipse.jetty.util.IteratingCallback.close(IteratingCallback.java:428) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.server.HttpConnection.onClose(HttpConnection.java:519) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.io.ssl.SslConnection.onClose(SslConnection.java:378) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.io.SelectorManager.connectionClosed(SelectorManager.java:345) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.io.ManagedSelector$DestroyEndPoint.run(ManagedSelector.java:1104) ~[!/:9.4.43.v20210629] at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:883) [!/:9.4.43.v20210629] at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:1034) [!/:9.4.43.v20210629] at java.lang.Thread.run(Unknown Source) [?:?] # ArcGIS GeoEvenet Server after Federeted ![image](/attachments/af65253e-8b9d-4540-869d-97ab6ddaebd4) ![image](/attachments/043cc915-baef-4e01-8515-480e472e6241) - error: An SSL Handshake error has occurred when attempting to communicate with URL: "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=NJYVPNXm8BuRlpYkDoGszADv4MSC5pJILE0UN0TxqavTU4ShxIQZU5zV4QFRH7Nq-euLJcEYZV2VCxa4UgEx0eP4_D0v3HaLYJCmbFHbsdlhT5FESGnXcbauxLhDC7PJp9kxuxLreHUq7G3fDkWdiHobN1oubCjB02VKh-Z45SuXGVMA2aOoV28C34fWhR2GCHorrTuAARbFrQDJWpQbuQUrZD5anCXOOa-xWwg-GWHIzXlEh4AHrAaRrYzcJh6S". Please make sure you have imported the SSL certificate from "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=NJYVPNXm8BuRlpYkDoGszADv4MSC5pJILE0UN0TxqavTU4ShxIQZU5zV4QFRH7Nq-euLJcEYZV2VCxa4UgEx0eP4_D0v3HaLYJCmbFHbsdlhT5FESGnXcbauxLhDC7PJp9kxuxLreHUq7G3fDkWdiHobN1oubCjB02VKh-Z45SuXGVMA2aOoV28C34fWhR2GCHorrTuAARbFrQDJWpQbuQUrZD5anCXOOa-xWwg-GWHIzXlEh4AHrAaRrYzcJh6S" into GeoEvent's site via the ArcGIS Server Admin API. Root Cause: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".
rbsetiawan added this to the config ArcGIS GeoEvent Server project 3 years ago
rbsetiawan self-assigned this 3 years ago
Poster
Owner

Error SSL Trusted from GeoEvent Server to Portal for ArcGIS or Othe Server

ini terjadi karena SSL Trusted dari ArcGIS GeoEvent ke atau dari Portal for ArcGIS dan Server lain dalam 1 organisasi (Federeted) di anggap tidak aman.
Untuk mengatasi hall ini maka di perlukan penyelarasan ssl atau penyamaan ssl yang di gunakan dari masing-masing ArcGIS

Berikut merupakan stadar atau default ssl yang di unakan atau buil-in dari ArcGIS

Default SSL ArcGIS Enterprise

ArcIS GeoEvent Server SSL Default:

  • Home > machines > RND07.GISPORTAL.ID
    Web server SSL Certificate: SelfSignedCertificate

  • Home > security > config
    SSL Cipher Suites:
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ArcGIS Server (Hosting) SSL Default:

  • Home > machines > RND01.GISPORTAL.ID
    Web server SSL Certificate: SelfSignedCertificate

  • Home > security > config
    SSL Cipher Suites:
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

Portal for ArcGIS SSL Default:

  • Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
    Web Server SSL Certificate: portal

  • Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
    Web Server SSL Cipher Suites:
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

Change SSL ArcGIS Enterprise

Step 1 ArcIS GeoEvent Server SSL gisportal.id:

image

  • Portal for ArcGIS federeted ArcGIS GeoEvent not valid:
    image

Step 2 ArcGIS Server (Hosting) SSL gisportal.id:

image

  • Portal for ArcGIS federeted ArcGIS Server (Hosting) not valid:
    image

Step 3 Portal for ArcGIS SSL gisportal.id:

  • Home > Machines > RND00.GISPORTAL.ID > SSLCertificates
    Web Server SSL Certificate: gisportal.id

  • Home > Machines > RND00.GISPORTAL.ID > SSLCertificates

  • SSL Config:

    Server SSL Status
    ArcGIS GeoEvent Server gisportal.id update
    ArcGIS Server (Hosting) gisportal.id update
    Portal for ArcGIS gisportal.id update
  • Success GeoEvent Server:
    image

  • Portal for ArcGIS federeted ArcGIS Server (Hosting) not valid:
    image

  • Portal for ArcGIS federeted ArcGIS GeoEvent not valid:
    image

# Error SSL Trusted from GeoEvent Server to Portal for ArcGIS or Othe Server ini terjadi karena SSL Trusted dari ArcGIS GeoEvent ke atau dari Portal for ArcGIS dan Server lain dalam 1 organisasi (Federeted) di anggap tidak aman. Untuk mengatasi hall ini maka di perlukan penyelarasan ssl atau penyamaan ssl yang di gunakan dari masing-masing ArcGIS Berikut merupakan stadar atau default ssl yang di unakan atau buil-in dari ArcGIS # Default SSL ArcGIS Enterprise ## ArcIS GeoEvent Server SSL Default: - Home > machines > RND07.GISPORTAL.ID Web server SSL Certificate: SelfSignedCertificate - Home > security > config SSL Cipher Suites: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA ## ArcGIS Server (Hosting) SSL Default: - Home > machines > RND01.GISPORTAL.ID Web server SSL Certificate: SelfSignedCertificate - Home > security > config SSL Cipher Suites: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA ## Portal for ArcGIS SSL Default: - Home > Machines > RND00.GISPORTAL.ID > SSLCertificates Web Server SSL Certificate: portal - Home > Machines > RND00.GISPORTAL.ID > SSLCertificates Web Server SSL Cipher Suites: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_AES_256_GCM_SHA384, TLS_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA # Change SSL ArcGIS Enterprise ## Step 1 ArcIS GeoEvent Server SSL gisportal.id: - Home > machines > RND07.GISPORTAL.ID > edit Web server SSL Certificate: SelfSignedCertificate - Home > security > config - SSL Config: | Server | SSL | Status | | -------- | -------- | -------- | | ArcGIS GeoEvent Server | gisportal.id | update | | ArcGIS Server (Hosting) | SelfSignedCertificate | (Default) | | Portal for ArcGIS | portal | (Default) | - Error GeoEvent Server: An SSL Handshake error has occurred when attempting to communicate with URL: "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=-LDzLnbwOUH7SB4H69nXzXcE3hwtcrRBUYDwPw2P8r0jUn9CgVRVZsqmAOksjri2dSfkn-DzHZbLg-ZJlSy3O2vwK1vvxTp0fIyJG9vzag1flRLdeIb5OrFzgkwj-znS50LW46u15wgI7U6LUh7pNhZTPb33eeoVia_J2OiOjKmjnP9OOfwgcnL43qYsbvILu5pxwHSp1tcCeESqYO7l_nbklN7rk0h-g9mQdU3yHOFN_kNuEYkKJJf2ioIvmtiI". Please make sure you have imported the SSL certificate from "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=-LDzLnbwOUH7SB4H69nXzXcE3hwtcrRBUYDwPw2P8r0jUn9CgVRVZsqmAOksjri2dSfkn-DzHZbLg-ZJlSy3O2vwK1vvxTp0fIyJG9vzag1flRLdeIb5OrFzgkwj-znS50LW46u15wgI7U6LUh7pNhZTPb33eeoVia_J2OiOjKmjnP9OOfwgcnL43qYsbvILu5pxwHSp1tcCeESqYO7l_nbklN7rk0h-g9mQdU3yHOFN_kNuEYkKJJf2ioIvmtiI" into GeoEvent's site via the ArcGIS Server Admin API. Root Cause: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target". ![image](/attachments/870fc93a-974d-41c1-9197-6982399042d4) - Portal for ArcGIS federeted ArcGIS GeoEvent not valid: ![image](/attachments/f7a4d3b3-c590-4c95-80ea-161ea6a8593c) ## Step 2 ArcGIS Server (Hosting) SSL gisportal.id: - Home > machines > RND01.GISPORTAL.ID > edit Web server SSL Certificate: gisportal.id - Home > security > config - SSL Config: | Server | SSL | Status | | -------- | -------- | -------- | | ArcGIS GeoEvent Server | gisportal.id | update | | ArcGIS Server (Hosting) | gisportal.id | update | | Portal for ArcGIS | portal | (Default) | - Error GeoEvent Server: An SSL Handshake error has occurred when attempting to communicate with URL: "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=lkkxS-xSmFO3tXSCtmEjJs_OH91SbV7aYMcnkkNgQVGPXj7r-rMliwlGd-f_TEdtlaK9MACfI7FCw6wdyYV_2lwu71cGzFiA8yThCgPycAWXxK6wb245x0vta7xkbS60Q9s9Gt4M8Uxa9i37LaaHqJNkObkG5pfSkxzwIJZFv_tVL_VV4wcCRYARGg93u09Le2Q8O_jQSzhTqXCAT5VlRnuYv7QfaRqSEOUvoFwyWRUvbSMbHIw3SjsvxZyuS_ws". Please make sure you have imported the SSL certificate from "https://RND00.GISPORTAL.ID:7443/arcgis/sharing/community/self?f=json&token=lkkxS-xSmFO3tXSCtmEjJs_OH91SbV7aYMcnkkNgQVGPXj7r-rMliwlGd-f_TEdtlaK9MACfI7FCw6wdyYV_2lwu71cGzFiA8yThCgPycAWXxK6wb245x0vta7xkbS60Q9s9Gt4M8Uxa9i37LaaHqJNkObkG5pfSkxzwIJZFv_tVL_VV4wcCRYARGg93u09Le2Q8O_jQSzhTqXCAT5VlRnuYv7QfaRqSEOUvoFwyWRUvbSMbHIw3SjsvxZyuS_ws" into GeoEvent's site via the ArcGIS Server Admin API. Root Cause: "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target". ![image](/attachments/e138f88b-4f29-4b39-aa17-850f24148511) - Portal for ArcGIS federeted ArcGIS Server (Hosting) not valid: ![image](/attachments/ed6e1a12-458f-4020-9f0f-63c295b8fdab) ## Step 3 Portal for ArcGIS SSL gisportal.id: - Home > Machines > RND00.GISPORTAL.ID > SSLCertificates Web Server SSL Certificate: gisportal.id - Home > Machines > RND00.GISPORTAL.ID > SSLCertificates - SSL Config: | Server | SSL | Status | | -------- | -------- | -------- | | ArcGIS GeoEvent Server | gisportal.id | update | | ArcGIS Server (Hosting) | gisportal.id | update | | Portal for ArcGIS | gisportal.id | update | - Success GeoEvent Server: ![image](/attachments/cfd55ef7-fda6-4a9a-a8c1-53f3f4ef1d55) - Portal for ArcGIS federeted ArcGIS Server (Hosting) not valid: ![image](/attachments/ed6e1a12-458f-4020-9f0f-63c295b8fdab) - Portal for ArcGIS federeted ArcGIS GeoEvent not valid: ![image](/attachments/f7a4d3b3-c590-4c95-80ea-161ea6a8593c)
rbsetiawan closed this issue 3 years ago
rbsetiawan added the
ArcGIS Enterprise
Issue
RND
labels 3 years ago
Sign in to join this conversation.
Loading…
There is no content yet.