Automation Suite Validating Certificate Failed

News Knowledge Base
1

Resolution when Automation Suite Certificate update fails with " Validating Certificate..... failed" .

Issue Description: Automation Suite Certificate update fails with: Validating Certificate..... failed

Root Cause: There are a few reason why the validation of the certificates can fail. In most cases it will be that the wrong inputs to the update script were provided or that the new certificate is not valid.

Diagnosing / Resolving

  1. If using 22.4.0, there was a bug that would cause the following issue:
    1. [ERROR][2022-10-14T13:58:07+0000]: Validating Certificate..... failed
      [ERROR][2022-10-14T13:58:07+0000]: >>> Certificate does not have alm.. in SAN
    2. Notice in the above that the SAN attribute contains ".."
    3. It should only contain one "." and this is a bug
    4. To fix this issue, go to the directory that the configureUiPathAS.sh script sits in.
    5. Download the attached update.sh file
    6. Backup the old update.sh file
      • mv Cluster_Configure\tls-cert\update.sh update.sh_backup
    7. Relative to the directory of the configureUiPathAS.sh script, replace the file Cluster_Configure\tls-cert\update.sh with the new file. i.e. mv 22.4.0_update.sh Cluster_Configure\tls-cert\update.sh
    8. Retry the validation. If it works make sure to delete the backedup update.sh file
  2. If the above issue is not the problem the issue should be that the certificate is not valid
  3. To check the certificate SAN attributes manually, the following command can be used:
    1. openssl x509 -in -noout -text 2> /dev/null | grep "DNS:"
    2. The certificate file in the above, should be the TLS certificate that will be used for the SSL encryption.
    3. The above should return the SAN attributes mentioned at Configuring The DNS
      • If the Automation Suite URL was https://autosuite.uipath.devtest, we would expect one of the following outputs
        1. DNS:autosuite.uipath.devtest, DNS:*.autosuite.uipath.devtest
        2. Or DNS: DNS:autosuite.uipath.devtest, DNS:alm.autosuite.uipath.devtest, ... etc.
  4. If the manual check seems valid, then run the tool with -d. Capture logs by executing and run the command as follows:
    • configureUiPathAS.sh 2>&1 1>&3 | tee -a certificateValidationLog.log) 3>&1 | tee -a certificateValidationLog.log.