SA-29488

Summary

The user have created a mobile certificate set for android and tried to build an android application for their application in Pega 7.2. The build was successfully loaded till 100% and while downloading the build it got stuck and it shows loading button for the last few days.

Error Messages

Log file error:

016-10-14 12:50:53,410 [egaRULES-MasterAgent] [  STANDARD] [                    ] [                    ] (          internal.async.Agent) INFO    - System date: Fri Oct 14 12:50:53 IST 2016 Total memory: 463,732,736 Free memory: 102,261,520 Requestor Count: 14 Shared Pages memory usage: 0%
2016-10-14 12:52:24,723 [   PegaRULES-Batch-1] [  STANDARD] [                    ] [ReportAbuse:01.01.02] (Status.Rule_Application.Action) INFO   XXXBBCS - Mobile build succeeded
2016-10-14 12:52:24,822 [   PegaRULES-Batch-4] [  STANDARD] [                    ] [ReportAbuse:01.01.02] (ector.Rule_Connect_REST.Action) ERROR  XXXSER - javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
2016-10-14 12:52:24,822 [   PegaRULES-Batch-4] [  STANDARD] [                    ] [ReportAbuse:01.01.02] (      internal.mgmt.Executable) ERROR  XXXSER - Exception
com.pega.pegarules.pub.services.ConnectorException: Caught unhandled exception: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
    at com.pegarules.generated.activity.ra_action_pyinvokerestconnector_1df02d5a96ad215dc3e7350d2a9c98bf.step6_circum0(ra_action_pyinvokerestconnector_1df02d5a96ad215dc3e7350d2a9c98bf.java:1771)
    at com.pegarules.generated.activity.ra_action_pyinvokerestconnector_1df02d5a96ad215dc3e7350d2a9c98bf.perform(ra_action_pyinvokerestconnector_1df02d5a96ad215dc3e7350d2a9c98bf.java:154)
    at com.pega.pegarules.session.internal.mgmt.Executable.doActivity(Executable.java:3510)
    at com.pegarules.generated.activity.ra_action_invoke_6a91441c4f6e5048b63360383ae1b952.step7_circum0(ra_action_invoke_6a91441c4f6e5048b63360383ae1b952.java:1002)
    at com.pegarules.generated.activity.ra_action_invoke_6a91441c4f6e5048b63360383ae1b952.perform(ra_action_invoke_6a91441c4f6e5048b63360383ae1b952.java:172)
    at com.pega.pegarules.session.internal.mgmt.Executable.doActivity(Executable.java:3510)
    at com.pegarules.generated.activity.ra_action_pzdownloadbuild_886598c5394801c8addb1195b6323c83.step3_circum0(ra_action_pzdownloadbuild_886598c5394801c8addb1195b6323c83.java:463)
    at com.pegarules.generated.activity.ra_action_pzdownloadbuild_886598c5394801c8addb1195b6323c83.perform(ra_action_pzdownloadbuild_886598c5394801c8addb1195b6323c83.java:110)
    at com.pega.pegarules.session.internal.mgmt.Executable.doActivity(Executable.java:3510)
    at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivitiesAlt(ThreadRunner.java:646)
    at com.pega.pegarules.session.internal.mgmt.base.ThreadRunner.runActivities(ThreadRunner.java:572)
    at com.pega.pegarules.session.internal.mgmt.PRThreadImpl.runActivities(PRThreadImpl.java:458)
    at com.pega.pegarules.session.internal.async.agent.QueueProcessor.executeBatchTask(QueueProcessor.java:257)
    at com.pega.pegarules.session.internal.async.agent.QueueProcessor.execute(QueueProcessor.java:321)
    at com.pega.pegarules.session.internal.async.BatchRequestorTask.run(BatchRequestorTask.java:967)
    at com.pega.pegarules.session.internal.PRSessionProviderImpl.performTargetActionWithLock(PRSessionProviderImpl.java:1266)
    at com.pega.pegarules.session.internal.PRSessionProviderImpl.doWithRequestorLocked(PRSessionProviderImpl.java:1015)
    at com.pega.pegarules.session.internal.PRSessionProviderImpl.doWithRequestorLocked(PRSessionProviderImpl.java:908)
    at com.pega.pegarules.session.internal.async.BatchRequestorTask.run(BatchRequestorTask.java:684)
    at com.pega.jsr166backport.java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:991)
    at com.pega.jsr166backport.java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:532)
    at java.lang.Thread.run(Thread.java:745)
Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
    at sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:397)
    at com.pega.apache.http.conn.ssl.AbstractVerifier.verify(AbstractVerifier.java:128)
    at com.pega.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:398)
    at com.pega.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:496)
    at com.pega.apache.http.conn.scheme.SchemeSocketFactoryAdaptor.connectSocket(SchemeSocketFactoryAdaptor.java:62)
    at com.pega.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:148)
    at com.pega.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:149)
    at com.pega.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:121)
    at com.pega.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:573)
    at com.pega.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:425)
    at com.pega.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:825)
    at com.pega.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:759)
    at com.pegarules.generated.activity.ra_action_pyinvokerestconnector_1df02d5a96ad215dc3e7350d2a9c98bf.step6_circum0(ra_action_pyinvokerestconnector_1df02d5a96ad215dc3e7350d2a9c98bf.java:1296)
    ... 21 more

Steps to Reproduce

1. Created a certificate set for Android
2. In the application rule, under custom mobile app tab, selected the version and Certificate set name and clicked "Build Now" button.
3. The build was started to load and its loaded 100% then while downloading it got stuck and on screen it shows the load button for the past few days. Its still showing even after clearing the cache and restarting the server.

Root Cause

There were changes to Pega Mobile build server which were not communicated to the users. Build server was switched to use HTTPS or SSL, which was not communicated to the user, as required SSL intermediate certificates were not present in the trust store build was failing with an error.

Resolution

1. Download all the certificates in the certificate path by navigating to the build server URL through a web browser.

2. Add all the certificates as a trusted certificates to java trust store (cacerts) file by using the below command.

keytool -keystore cacerts -importcert -alias <aliasname> -file <name of the .cer file>

Alias name can be any name of choice preferably a name which can be used to identify the purpose of the certificate.
Export the certificate as a "DER encoded binary X509 (.CER)" file