Update 7.6.0.55 fails - untrusted signer

[Vadim_Paladi]

Tried to download it several times today with same result.

"Content760Pkg.zip is not signed by a trusted signer"

No changes have been made to client and server.

[toddg1]

I don't have a solution - but I think there is work being done to address this.

A question, which browser were you using?  Did you try a different browser? I know many folks have been able to download this package successfully - and I have heard some rumblings that the "signing" problem is in the browser having been updated in a way that isn't compatible.

Just a thought - if you haven't tried Firefox or Chrome - it might be worth a try?

[toddg1]

Hello - we are aware of a problem where an out of date certificate is on the download server that is causing this problem.  We are working to get this corrected as soon as possible.

[toddg1]

Hi - this problem was fixed yesterday afternoon.  Can you please try again now?  Please post your results if you can

[Vadim_Paladi]

Still same result.

HPRSExecutionManager[SoftwareManager Task (ae24f372-3862-4d4d-a8ec-5e5a5a240dee)] ERROR c.h.u.s.p.SwmProcessingModule - Caught an unexpected Exception
com.hp.uca.swm.exception.SwmDownloadFileException: java.lang.SecurityException: G:\ProgramData\HP\RS\DATA\swm\LANDINGZONE\Content760Pkg\Content760Pkg.zip is not signed by a trusted signer
 at com.hp.uca.swm.apackage.PackageDownloader.verifySignature(PackageDownloader.java:233) ~[swm.jar:na]
 at com.hp.uca.swm.apackage.PackageDownloader.download(PackageDownloader.java:142) ~[swm.jar:na]
 at com.hp.uca.swm.packages.SwmDownloader.download(SwmDownloader.java:329) ~[swm.jar:na]
 at com.hp.uca.swm.packages.SwmDownloader.downloadPkgAndDepPkgs(SwmDownloader.java:258) ~[swm.jar:na]
 at com.hp.uca.swm.packages.SwmDownloader.downloadPackage(SwmDownloader.java:142) ~[swm.jar:na]
 at com.hp.uca.swm.processingmodules.SwmProcessingModule.handleRequest(SwmProcessingModule.java:64) ~[swm.jar:na]
 at com.hp.uca.taskcontroller.processingmodules.AbstractProcessingModule.processModule(AbstractProcessingModule.java:122) [taskcontroller.jar:na]
 at com.hp.uca.taskcontroller.processingmodules.SimpleProcessingModule.handleRequest(SimpleProcessingModule.java:38) [taskcontroller.jar:na]
 at com.hp.uca.taskcontroller.processingmodules.AbstractProcessingModule.processModule(AbstractProcessingModule.java:122) [taskcontroller.jar:na]
 at com.hp.uca.taskcontroller.threads.ProcessingModuleEngine.run(ProcessingModuleEngine.java:26) [taskcontroller.jar:na]
 at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [na:1.8.0_60]
 at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [na:1.8.0_60]
 at java.lang.Thread.run(Thread.java:745) [na:1.8.0_60]

[toddg1 · Accepted solution]

HI All,

Customers do not have to do anything unusual to recover from a failure. The next time their 7.6.0 client checks for updates – whether by schedule, or by hand-triggering – the certificate bundle will download and be processed.

It is likely the user(s) reporting problems are trying to download the CLU2 package, which is already visible as ‘available’ in the SWM screen, without clicking on the “check for updates” button.

 Please click on the "Check for Updates" button - and then this new certificate should be brought to your system.

The cert update procedure is part of the check-for-updates step, not part of the download-a-package step.

 Here is what you will see in the logs as part of a successful check-for-updates execution:

31 Aug 2016 15:47:02.888 HPRSExecutionManager[SoftwareManager Task (c815d70e-6ffa-4632-8fdf-5aa90cb4152a)] INFO  com.hp.uca.swm.common.DownloadFile - Attempting to download https://services.isee.hp.com/SWM/certs/certs.zip to C:\ProgramData\HP\RS\DATA\ucacore\certs\certs.zip

31 Aug 2016 15:47:03.560 HPRSExecutionManager[SoftwareManager Task (c815d70e-6ffa-4632-8fdf-5aa90cb4152a)] INFO  com.hp.uca.swm.common.DownloadFile - Successfully downloaded https://services.isee.hp.com/SWM/certs/certs.zip to C:\ProgramData\HP\RS\DATA\ucacore\certs\certs.zip

31 Aug 2016 15:47:03.607 HPRSExecutionManager[SoftwareManager Task (c815d70e-6ffa-4632-8fdf-5aa90cb4152a)] INFO  c.h.u.a.DigitalSignatureVerifier - C:\ProgramData\HP\RS\DATA\ucacore\certs\certs.zip is signed by verisign-class3-codesigning-2010-ca

31 Aug 2016 15:47:03.622 HPRSExecutionManager[SoftwareManager Task (c815d70e-6ffa-4632-8fdf-5aa90cb4152a)] INFO  c.h.u.accounts.IRSAccountInfoManager - Imported 1-AddTrust_External_CA_Root-2000-2020.cer into keystore from C:\ProgramData\HP\RS\DATA\ucacore\certs\certs.zip

...

31 Aug 2016 15:47:03.810 HPRSExecutionManager[SoftwareManager Task (c815d70e-6ffa-4632-8fdf-5aa90cb4152a)] INFO  c.h.u.accounts.IRSAccountInfoManager - Imported 5-hpca2ssG2_ie.cer into keystore from C:\ProgramData\HP\RS\DATA\ucacore\certs\certs.zip

31 Aug 2016 15:47:03.857 HPRSExecutionManager[SoftwareManager Task (c815d70e-6ffa-4632-8fdf-5aa90cb4152a)] INFO  c.hp.uca.swm.manifest.SwmGetCatalog - Total# of parsed packages : 44

Once that is complete, the CLU downloads correctly.

[Vadim_Paladi]

Thanks! That works.

[Amr_Koptan]

Hello Toddg1

Thanks alot for the instructions you provided , the refresh brought new Manifest items to be updated but i received a new error which i have absolutely no clue about, it says in the logs :

22 Feb 2017 14:36:47.132 HPRSExecutionManager[SoftwareManager Task (29983a5e-1cd8-44fa-8abf-be82a47eb90d)] ERROR c.h.u.s.p.SwmProcessingModule - Caught an unexpected Exception

com.hp.uca.swm.exception.SwmDownloadFileException: MD5 checksum (2d88c9564a8cf729182135c454bd1e43) of package LocalHelpPkg (7.7.0.42) doesn't match the checksum (760825e4d31490f683b46d8545ded104) specified in package catalog

do you have any idea what this is ? thanks 

[toddg1]

Asking the team about this - stay tuned

[Amr_Koptan]

Thank you very much appreciate your assistance a lot

Amr