Poll an external HTTPS website for JSON - Certification Error

[BenGrod]

I could use some help with a GeoEvent Processor error that I am receiving when I try to Poll and external HTTPS website for JSON (input connector) using GeoEvent Processor Manager 10.2.2. Posting the log below and by the looks of it this is some type of certification error? Would this be a certification issue on my server or on the website which host the JSON? In short, we are working with a third party to track CalAmp Location Messaging Units (LMU). The third party is providing the LMU feed (currently test data) in JSON format in an effort to easily integrate with the out of the box GeoEvent Processor Input Connectors. One important note is that I can successfully navigate to the website while logged in to the server which GeoEvent Processor is installed on. From the server we added the site as Trusted website. Does GeoEvent Processor support HTTPS?

external website in JSON format

https://login.gaugesmart.com/API/Assets/88037cd15f884f1a9a7a29a18fd79296

Log 1:

Failed to get a respon88037cd15f884f1a9a7a29a18fd79296se from https://login.gaugesmart.com/API/Assets/

Log 2:

Second attempt failed. Giving up. (https://login.gaugesmart.com/API/Assets/88037cd15f884f1a9a7a29a18fd79296 --- sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[BenGrod]

Created a Support Ticket with Esri this morning but still looking for help if you can. In additional testing GeoEvent Processor can consume the JSON on a non https site (http), everything passes through and updates correctly, from input to output and updating a feature service. So, it’s a security (https) issue though not sure how to resolve it or whether it is a bug.

[RJSunderman · Accepted solution]

Hello Ben -

Sorry that you're having trouble ... to answer your question, yes, the GeoEvent Extension does support polling secured feeds. I tried configuring an input on my 10.3.1 setup and didn't have any problem ingesting the feed's data, so I setup a 10.2.2 instance to try with the older product release and wasn't able to reproduce the issue you are seeing.

I've reached out to Esri Tech Support this morning and spoke with the analyst assigned to your incident. He should be reaching out to you ASAP ... but so far, this looks like a security configuration issue, not a bug.

- RJ

Mark Holzworth​

[BenGrod]

RJ thank you for the reply and suggestions. I see you emailed me with further information so I'll reply back to that and hopefully this is a quick resolution and not a bug as you suggest.

[BenGrod]

RJ,

After further testing with the help of Esri Support we identified the server hosting the JSON had a certificate issue. GeoEvent does work with HTTPS. The site hosting the JSON is using the GoDaddy G2 Cert. GeoEvent Server does not trust that Certificate because its incomplete. This is s known issue about the G2 Cert. This Cert sometimes isn't complete. Certain Intermediate Certs are missing from the chain.

The link below explains the issue in more detail. It also proposes a fix for the issue.

http://tozny.com/blog/godaddys-ssl-certs-dont-work-in-java-the-right-solution/

[VikramS]

Hello Ben,

Were you able to successfully get results after upgrading to 10.3.1 Geoevent. I am also trying to poll an external HTTPS for JSON and it is erroring out . I checked the certificate and it is using GoDaddy. So wanted to make sure this was fixed at all

[BenGrod]

Vikram,

Yes we were able to successfully connect with 10.3.1 but I believe the the GoDaddy certificate may be your issue in this scenario. Esri is not likely to trust certificates issued by GoDaddy. We went back to our vendor and asked them to modify their certification which resolved. Hope this is helpful and good luck.