Re: Error consuming Web Service via Systools.HTTPPOSTCLOB

This sounds suspiciously like a CA or intermediate certificate expiration (Comodo, perhaps?)  Since it is a Java program making the call, the certs would need to be in the java keystore.  So you will most likely need to use the java keytool.  I'd list the certs that you currently have so you can see the expiration dates.  If the Java version is relatively old, it cold have expired CA roots.

Start with the Java version you are running (would be nice to know) and then list the certs.  Most likely you'll find, see the issue.  Just remember that running a java program isn't like a browser that gets regular updates to CA certs and intermediates. You need to maintain that keystore yourself, especially if you are on an older version of IBM i (ptf's may update the keystore, but I am not sure)

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek IBM_i_Geek

On 3/11/2022 12:08 PM, gio.cot via RPG400-L wrote:

Hi all

I'm try to consume a web service with this statement:


SELECT *

FROM JSON_TABLE(

Systools.HTTPPOSTCLOB(

'https://wsurl/zzz/changexx',

'<httpHeader> <header name="content-type"
value="application/json" /> </httpHeader> ' ,


'{"user":"MYUSER","psw":"mypass":"123","order_id":"6","sts":"A","sub":"X"}')
,

'$'

COLUMNS(

"status" VARCHAR(30) PATH 'lax $.status' DEFAULT '' ON
EMPTY,

"err" VARCHAR(1024) PATH 'lax $.err' DEFAULT '' ON EMPTY

)

) AS x;


but i receive this error:


Message: [SQL4302] The Java stored procedure or user-defined function
SYSTOOLS.HTTPPOSTCLOB and the specific name HTTPP00013 aborted with an error
"com.ibm.jsse2.util.h: PKIX path building failed:
java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could
not build a valid CertPath.; internal cause is:

java.security.cert.CertPathValidatorException: The certificate expired at
Sat May 30 12:48:38 CEST 2020; internal cause is:

java.security.cert.CertificateExpiredException: NotAfter: Sat May 30
12:48:38 CEST 2020". It causes . . . : The Java stored procedure or
user-defined function was aborted with a Java exception. If the SQJAVA
component trace is active, the component trace for the job contains a Java
stack for the interrupted method. Correction. . : Debug the Java method to
eliminate the error.


I'm running V/R2


Which could be the problem ?


Thanks in advance