LDAP Server Operational Status is false following upgarde

[Sam Ogden]

Hi All,

we have just had our TEST instance upgraded from Helsinki patch 12 to Kingston patch 2.  Following this our LDAP server now has the operational server of false.  When I test connection I get the following error:

ldaps://cdlldaps-vip.cheshdatasys.co.uk:636/ sun.security.validator.ValidatorException: PKIX path building failed: java.security.cert.CertPathBuilderException: Unable to find certificate chain.

Any suggestions what we need to do to get past this error?

Thanks

Sam

[Community Alums]

Hi Sam,

We have managed to fix this issue. Our mid-server had separate folders that stored certificates for the Dev, Test, Acceptance and Production environments. During the upgrade to Kingston, the certificates for Dev, Test & Acceptance were overwritten and that caused the LDAP connection to fail. We copied the cert for Production to the other folders and now it's working fine.

Thanks

Kunal

[Nancy8]

Hi Kunal,

We had same problem after  Kingston upgrade.  We did load LDAP cert to Mid Server.  Do we need to uploading the service provider's trusted server certificate to our SN instance (https://docs.servicenow.com/bundle/kingston-platform-administration/page/administer/general/task/t_UploadATrustedServerCertificate.html)?

Thanks,

Nancy 

[Community Alums]

Hi Nancy,

No, we didn't need to do that in our case. So, hopefully it should not be required. Are you still facing the issue after restoring the certificates on your mid-server ?

Thanks

Kunal