Netwitness Live Account Test connection failure due to SSLHandshakeException
Issue
Netwitness UI->Admin-> System->Live Services page test connection fails with below error./var/lib/netwitness/uax/logs/sa.log
2022-09-07 09:11:58,465 [qtp798244209-5011479] INFO com.rsa.netwitness.carlos.config.ConfigurationMXBean - CmsConfiguration changed by admin
2022-09-07 09:11:58,471 [qtp798244209-5011479] ERROR com.rsa.smc.sa.live.web.controller.ajax.LiveCmsServerController - Test connection failed
com.rsa.netwitness.cms.domain.model.exceptions.CmsException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
at com.rsa.netwitness.cms.CMSAuthenticator.authenticate(CMSAuthenticator.java:62)
Caused by: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
at java.base/sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1691)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
2022-09-07 09:11:58,471 [qtp798244209-5011479] ERROR com.rsa.smc.sa.live.web.controller.ajax.LiveCmsServerController - Test connection failed
com.rsa.netwitness.cms.domain.model.exceptions.CmsException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
at com.rsa.netwitness.cms.CMSAuthenticator.authenticate(CMSAuthenticator.java:62)
Caused by: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
at java.base/sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1691)
Caused by: java.io.EOFException: SSL peer shut down incorrectly
Cause
This issue is due to the proxy SSL option being enabled, and no proxy certificates imported to AdminServer.
Resolution
Please follow the below steps to configure to disable SSL for proxy settings.- Login to Netwitness UI.
- Navigate to Admin->System->HTTP Proxy settings page.
- Uncheck the SSL option and click Apply.
- Then Navigate to Admin->System->Live Services page to test the connection, and it will be successful now.
- Restart Jetty service using the below command to load live content.
service jetty restart
6. Verify the live content searching in Configure->Live Content page.
Note: If the SSL option is to be used, Please follow Configure Proxy for NetWitness Platform to import certificates.
Product Details
RSA Product Set: NetWitness PlatformRSA Product/Service Type: RSA NW Admin, LIVE
RSA Version/Condition: 11.X
O/S Version: CentOS 7
Summary
This document outlines the procedure to get a Successful Live account connection.
Approval Reviewer Queue
Technical approval queue