Netwitness Live Account Test connection failure due to SSLHandshakeException

[#1]

Article Number

000002110

Applies To

RSA Product Set: NetWitness Platform
RSA Product/Service Type: RSA NW Admin, LIVE
RSA Version/Condition: 11.X
O/S Version: CentOS 7

Issue

Netwitness UI->Admin-> System->Live Services page test connection fails with below error.

/var/lib/netwitness/uax/logs/sa.log

2022-09-07 09:11:58,465 [qtp798244209-5011479] INFO  com.rsa.netwitness.carlos.config.ConfigurationMXBean - CmsConfiguration changed by admin
2022-09-07 09:11:58,471 [qtp798244209-5011479] ERROR com.rsa.smc.sa.live.web.controller.ajax.LiveCmsServerController - Test connection failed
com.rsa.netwitness.cms.domain.model.exceptions.CmsException: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
        at com.rsa.netwitness.cms.CMSAuthenticator.authenticate(CMSAuthenticator.java:62)
Caused by: javax.net.ssl.SSLHandshakeException: Remote host terminated the handshake
        at java.base/sun.security.ssl.SSLSocketImpl.handleEOF(SSLSocketImpl.java:1691)
Caused by: java.io.EOFException: SSL peer shut down incorrectly

Cause

This issue is due to the proxy SSL option being enabled, and no proxy certificates imported to AdminServer.

Resolution

Please follow the below steps to configure to disable SSL for proxy settings.

1. Login to Netwitness UI.
2. Navigate to Admin->System->HTTP Proxy settings page.
3. Uncheck the SSL option and click Apply.
4. Then Navigate to Admin->System->Live Services page to test the connection, and it will be successful now.
5. Restart Jetty service using the below command to load live content.

service jetty restart

        6. Verify the live content searching in Configure->Live Content page.

Note: If the SSL option is to be used, Please follow Configure Proxy for NetWitness Platform to import certificates.