AnsweredAssumed Answered

ArcGIS Portal Error: Unable to load URL status 500 white changing feature hosted layer settings

Question asked by Aleksandra.Zietarageodata-no-esridist

on Jan 7, 2019
Latest reply on Aug 22, 2019 by abdo.abdelrasoul@swca.com

Like • Show 0 Likes0
Comment • 5

Hello,

I have ArcGIS Enterprise Base Deployment installed on a virtual machine. Both Server and Portal use Web Adaptors and they are federated. It has been in a use for a while when I experienced an error while changing capabilities of feature hosted layer in Portal. When I want to 'enable editing' in settings and save it I got an error:

I am using an external URL but everything is working as it should, certificates are also fixed. Error appears with all the layers hosted on portal. What is more, even though a layer is set as editable (from before), it figures as an empty setting in Portal.

I also found a message which comes in portal log files when I try to change capabilities:

<Msg time="2019-01-07T10:17:59,295" type="SEVERE" code="219999" source="Sharing" process="2188" thread="16" methodName="" machine="XXX" user="" elapsed=""> URL 'https://xxx:6443/arcgis/rest/admin/services/Hosted/Veier/FeatureServer?token=J5vz3shs-eMJbTtJSTEIiOEjoWM9TDKV3dW5phLxa_bV7d_5ckHI5l_SCLP5Tyt4jjU-ss210u9lTEtQx3u50tRvOMR5o38JN3WUoDf4GeU0P-B0TFcYm99us-cJekNLzBUz02_VZyiFzC5gTP8AeBRPk5zngAM6wxULlr50utTIqyXIpaMBKR4TG2iJus-gsasP3Tp5a1n0yJn38VQu8hqsukqC7Ckny3YfdUqotNg.&f=json' is not accessible: Error. java.security.cert.CertificateException: No name matching xxx found.</Msg>

I struggled with this error for a week, so decided to reinstall the whole environment. Everything was installed on Friday and the error disappeared - I tested couple of times, with different feature layers, from different machines, users, with different capabilities - no problem. I came to an office today, wanted to change capabilities and the error came again.

Has anyone experienced something similar?

I would appreciate any help.

Aleksandra

JQuinn-esristaff

Jan 8, 2019 5:10 PM

Correct Answer

You can disregard the error as that page requires authentication but you probably haven't provided any. Did you see a certificate error when first browsing to the page? Check the certificate by hitting F12 to bring up the dev tools, then go to Security > View Certificate and under the General tab, does the Issued to hostname match the hostname in the URL within the error, (https://xxx:6443). If not, go to Details and then see if a Subject Alternative Name is set for the certificate. If so, does it match the hostname? If not, then the problem is the certificate is mismatched and requests from Portal to that URL will be denied. If the hostname is correct, regenerate the certificate. If this is self-signed, then you can create it using Server Admin:

Configuring HTTPS using a self-signed certificate—ArcGIS Server Administration (Windows) | ArcGIS Enterprise

If the certificate is self-signed, then you'll need to sort out why it has changed. Has the hostname Server is installed on changed?

See the reply in context

No one else had this question

Outcomes

JQuinn-esristaff

Jan 7, 2019 9:48 AM

Can you open https://xxx:6443/arcgis/rest/admin/ in your browser and see if the browser indicates the certificate is mismatched? The problem is likely that the CN, or common name, of the certificate is yyy but the URL you're accessing that is assigned the certificate is https://xxx:6443/arcgis/. This indicates a certificate mismatch would be the reason for the java.security.cert.CertificateException: No name matching xxx found error.

Actions

Aleksandra.Zietarageodata-no-esridist

@ JQuinn-esristaff on Jan 7, 2019 10:35 PM

Hello Jonathan og thank you for a quick response!

Yes, you are right, when I try to open https://xxx:6443/arcgis/rest/admin I get an error and invalid certificate. The same happens both internally on the server and externally on a local machine.

I am using two certificates in IIS. Domain certificate which contains wildcard and the name of my company and was imported as Root certificate in Portal and Server. And CA certificate which contains the name of the machine so the xxx in a URL and was imported and updated as Self Signed Certificate in Portal and Server. What is wrong there?

What can I do to fix the problem?

Actions

JQuinn-esristaff

@ Aleksandra.Zietarageodata-no-esridist on Jan 8, 2019 5:10 PM

Configuring HTTPS using a self-signed certificate—ArcGIS Server Administration (Windows) | ArcGIS Enterprise

If the certificate is self-signed, then you'll need to sort out why it has changed. Has the hostname Server is installed on changed?

2 people found this helpful

Actions

Aleksandra.Zietarageodata-no-esridist

@ JQuinn-esristaff on Jan 9, 2019 11:43 PM

Thank you very much Jonathan!

You are correct, a Subject Alternative Name was missing in the certificate. What is more, the hostname wasn't complete. The problem is solved.

Actions

abdo.abdelrasoul@swca.com @ JQuinn-esristaff on Aug 22, 2019 4:15 PM

Hello all,

I have the exact same problem. We have a web adaptor (proxy) server for which we have a CA-signed wild card certificate *.xxxx.com (external), our hosted ArcGIS server has a different domain xxxxcoxx.com (https//xxxserver1:6443, internal). It is a multi-machine deployment (with two ArcGIS Server, the second one xxx2). I looked at the Subject Alternative name and it is xxxx.com not the name of the hosted server name.xxxxcoxx.com. What do I need to do here. Go back to provider to add Subject Alternative Name? Use a multiple-domains self signed certificate instead of the wild card?..No much experience behind basic understanding of certificates and properly import them.

I appreciate your help!

Actions

5 Replies

JQuinn-esristaff Jan 7, 2019 9:48 AM
Mark Correct
Correct Answer
Can you open https://xxx:6443/arcgis/rest/admin/ in your browser and see if the browser indicates the certificate is mismatched? The problem is likely that the CN, or common name, of the certificate is yyy but the URL you're accessing that is assigned the certificate is https://xxx:6443/arcgis/. This indicates a certificate mismatch would be the reason for the java.security.cert.CertificateException: No name matching xxx found error.
Like • Show 0 Likes0
Actions
- Aleksandra.Zietarageodata-no-esridist @ JQuinn-esristaff on Jan 7, 2019 10:35 PM
  Mark Correct
  Correct Answer
  Hello Jonathan og thank you for a quick response!
  Yes, you are right, when I try to open https://xxx:6443/arcgis/rest/admin I get an error and invalid certificate. The same happens both internally on the server and externally on a local machine.
  I am using two certificates in IIS. Domain certificate which contains wildcard and the name of my company and was imported as Root certificate in Portal and Server. And CA certificate which contains the name of the machine so the xxx in a URL and was imported and updated as Self Signed Certificate in Portal and Server. What is wrong there?
  What can I do to fix the problem?
  Like • Show 0 Likes0
  Actions
  - JQuinn-esristaff @ Aleksandra.Zietarageodata-no-esridist on Jan 8, 2019 5:10 PM
    Unmark Correct
    Correct Answer
    You can disregard the error as that page requires authentication but you probably haven't provided any. Did you see a certificate error when first browsing to the page? Check the certificate by hitting F12 to bring up the dev tools, then go to Security > View Certificate and under the General tab, does the Issued to hostname match the hostname in the URL within the error, (https://xxx:6443). If not, go to Details and then see if a Subject Alternative Name is set for the certificate. If so, does it match the hostname? If not, then the problem is the certificate is mismatched and requests from Portal to that URL will be denied. If the hostname is correct, regenerate the certificate. If this is self-signed, then you can create it using Server Admin:
    
    Configuring HTTPS using a self-signed certificate—ArcGIS Server Administration (Windows) | ArcGIS Enterprise
    
    If the certificate is self-signed, then you'll need to sort out why it has changed. Has the hostname Server is installed on changed?
    2 people found this helpful
    Like • Show 1 Like1
    Actions
    - Aleksandra.Zietarageodata-no-esridist @ JQuinn-esristaff on Jan 9, 2019 11:43 PM
      Mark Correct
      Correct Answer
      Thank you very much Jonathan!
      You are correct, a Subject Alternative Name was missing in the certificate. What is more, the hostname wasn't complete. The problem is solved.
      Like • Show 0 Likes0
      Actions
    - abdo.abdelrasoul@swca.com @ JQuinn-esristaff on Aug 22, 2019 4:15 PM
      Mark Correct
      Correct Answer
      Hello all,
      I have the exact same problem. We have a web adaptor (proxy) server for which we have a CA-signed wild card certificate *.xxxx.com (external), our hosted ArcGIS server has a different domain xxxxcoxx.com (https//xxxserver1:6443, internal). It is a multi-machine deployment (with two ArcGIS Server, the second one xxx2). I looked at the Subject Alternative name and it is xxxx.com not the name of the hosted server name.xxxxcoxx.com. What do I need to do here. Go back to provider to add Subject Alternative Name? Use a multiple-domains self signed certificate instead of the wild card?..No much experience behind basic understanding of certificates and properly import them.
      I appreciate your help!
      Like • Show 0 Likes0
      Actions

GeoNet

The Esri Community

ArcGIS Portal Error: Unable to load URL status 500 white changing feature hosted layer settings

Outcomes

Related Content

Recommended Content