Issue : OpenUI(Android client) for Agentry

[Former Member]

Hi Experts,

Currently working on Syclo + Open UI (Android) and trying to run the sample .apk file given as part of SMP3.0 SP02.

Facing issue while trying to do initial sync from emulator,

same .apk file we have installed it on the device and we can see the page where we need to input server details and port.

But the same page on the emulator is visible and only displays server filed alone and not finding the port field.

Environment : Agentry Server 6.0, Agentry Editor Plugin 7.0, Mobile SDK3 (SMP3.0 SP02)

Deployment : Standalone server mode

Scenario : When try to do initial sync from the emulator after giving the server details getting below error

Issues faced:

• First port number field is not visible on the emulator but able to it on the device? Do we need to create specific device type on the AVD manager
• Once the local system IP\ 10.0.2.2 is given it is not listing out the servers from emulator
• During initial Sync getting the below error – “SSL Hostname Invalid” and attached log file.

Please suggest overcome the issue.

With regards

Shankar.K

log.txt.zip

[bill_froelich]

Shankar,

First, you should not be mixing environment levels.  The SMP3 SP02 SDK tools only work against an SMP 3 server.  You cannot point a SMP3 client against an Agentry 6.0 server.

The reasons the port number option isn't displayed is that SMP3 has switched to using websocket connections and as such the connection string to the server is in the form of a URL now.

Also, all the clients are now doing server authentication using certificates that will require you to install the appropriate SMP3 server certificate on the device (if not generated from a trusted third party authority)

--Bill

[Former Member]

Thank you Stephen and Bill.

Now I am trying out in the below environment.

Environment: SMP 3.0 SP03, Agentry Editor Plugin 7.0, Mobile SDK3 (SMP3.0 SP02) and sample OpenUI application which come part of the SDK.

I am able to get the “Iam here” page, downloaded the certificate and placed on the Android emulator under mnt->sdcard folder. When try to do initial synch from emulator getting below error. I have configured the default authentication for the application and application is consistent in the cockpit.

16:56:14#+0530#INFO#com.sap.mobile.platform.server.cluster.service.impl.ClusterCommunicationsJGroupImpl##anonymous#Thread-13###Cluster node channel name: 'BDC6A-L-GXVHVS1-56715(bind_addr=10.117.147.205:53667)' | 2014 05 05 16:56:17#+0530#INFO#com.sap.mobile.platform.server.cluster.service.impl.ClusterCommunicationsJGroupImpl##anonymous#Thread-13###Cluster node channel name: 'BDC6A-L-GXVHVS1-44167(bind_addr=10.117.147.205:53670)' | 2014 05 05 16:56:20#+0530#INFO#System.out##anonymous#SMPServerStatusManager###SMPServerStatusManager: 86 of 86 tracked bundles have initialized. | 2014 05 05 16:56:21#+0530#INFO#com.sap.mobile.platform.server.cluster.service.impl.ClusterCommunicationsJGroupImpl##anonymous#Thread-13###Cluster node channel name: 'BDC6A-L-GXVHVS1-40724(bind_addr=10.117.147.205:53675)' | 2014 05 05 16:56:21#+0530#INFO#System.out##anonymous#SMPServerStatusManager###SMPServerStatusManager: The SMP server has initialized and is ready. | 2014 05 05 17:07:07#+0530#WARN#com.sybase.security.core.CertificateValidationLoginModule##anonymous#http-bio-8081-exec-2###The certificate (chain) is not valid. |

From startup.log – it is clear the Agentry server is up and trying to connect via the url https://localhost:8081/OpenUI from emulator

16:56:20 05/05/2014: Starting front ends

16:56:20 05/05/2014: WebSockets Front End: Opening WebSockets servlet for sub-URL /OpenUI

16:56:20 05/05/2014: Event: 17, 10, WebSockets Front End v7.0.3.159

16:56:20 05/05/2014: Event: 0, 0, Old log files moved into C:\SAP\MobilePlatform3\Server\log\agentry\rolled\2014-05-05-165617

16:56:20 05/05/2014: Event: 0, 23, Agentry startup is complete.

I have generated the certificate and placed it in the server(\SAP\MobilePlatform3\Server\configuration\com.sap.mobile.platform.server.agentry) and client emulator (mnt->sdcard folder). But still I am facing the issue – “The certificate (chain) is not valid”.

Experts guide me to resolve the issue.

with regards

Shankar.K

[Former Member]

SMP 3 does certificates differently then SMP 2.3.  When you go to "/OpenUI" subURL and get the "I am here", you can download and install the certificate that this page is using.

[Former Member]

Could you please elaborate on the steps to be carried out to implement the certificate exchange on SMP3.0.

• SMP3.0 has the default certificate? Or Do we need to generate Open SSL certificate and place it in the server and client
• How to download from the browser and install
• Do we need to place the certificate in the Android client

Please provide link if it is already described it the documentation.

With regards

Shankar.K

[Former Member]

Shankar,

Your last set of questions are not related to OpenUI for Agentry, please open a new thread so this tread doesn't get off topic.

[Former Member]

Hi Team,

Generated the SSL certificate and able to install it on the Android client and able to see certificate under Trusted Credentials - user section. On the server side placed the pfx file.

This is the URL(https://localhost:8081/OpenUI) where I am able to access and get the "I am Here", so from the android client using the https://10.0.2.2:8081/OpenUI. While generating the certificate I have given the FQDN as 10.0.2.2.

When I try to do the initial synch I am getting the below error from SMP 3.0.

2014 05 19 16:36:48#+0530#DEBUG#org.eclipse.virgo.web.enterprise.services.accessor.WebAppBundleClassLoaderDelegateHook##anonymous#http-bio-8083-exec-8###Exception occurred while trying to find class [com.sap.mobile.platform.server.http.control.RejectWarAccessOnAdminConnectorTomcatValve]. Exception message: com.sap.mobile.platform.server.http.control.RejectWarAccessOnAdminConnectorTomcatValve |

2014 05 19 16:36:48#+0530#DEBUG#org.apache.tomcat.util.net.jsse.JSSESupport##anonymous#http-bio-8083-exec-8###Error trying to obtain a certificate from the client javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

at sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:397)

at org.apache.tomcat.util.net.jsse.JSSESupport.getX509Certificates(JSSESupport.java:99)

at org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChain(JSSESupport.java:156)

at org.apache.coyote.http11.Http11Processor.actionInternal(Http11Processor.java:256)

at org.apache.coyote.http11.AbstractHttp11Processor.action(AbstractHttp11Processor.java:848)

at org.apache.coyote.Request.action(Request.java:346)

Please advice on the issue to over come it.

With regards

Shankar.K

[bill_froelich]

Shankar.K,

SMP3.0 doesn't use the .pfx file.  The SMP3 server has it's own keystore file containing the certificate used by Agentry.  The installation process generates a self-signed certificate for the SMP3.0 server based on the FQDN at the time of installation.  This certificate is also extracted to the file C:\SAP\MobilePlatform3\Server\configuration\smp_crt.cer that can then be installed on the various devices needing to connect to Agentry.

You can also view this certificate on the server to confirm the hostname used as that will need to match what you use in your websockets URl on the Agentry client.

--Bill

[Former Member]

• First port number field is not visible on the emulator but able to it on the device? Do we need to create specific device type on the AVD manager
  • The Agentry Client doesn't show the server of port in the transmit window anymore, Expected.

• Once the local system IP\ 10.0.2.2 is given it is not listing out the servers from emulator
  • The HTTPS url isn't transmit out, expected.
    

• During initial Sync getting the below error – “SSL Hostname Invalid” and attached log file.
  • Did you get the certificate from the SMP Server and install on the device?
  • Can you use a Web browser and go to the URL and get the "I am here" to make sure the Agentry Server is running, and you have the correct URL?
  • When you are at the "I am here" page, if you are using IE, you can download the certificate and copy it to the device and install it.

Stephen