Re: Error consuming Web Service via Systools.HTTPPOSTCLOB

[Pete Helgren <pete@xxxxxxxxxx>]

This sounds suspiciously like a CA or intermediate certificate 
expiration (Comodo, perhaps?)  Since it is a Java program making the 
call, the certs would need to be in the java keystore.  So you will most 
likely need to use the java keytool.  I'd list the certs that you 
currently have so you can see the expiration dates.  If the Java version 
is relatively old, it cold have expired CA roots.

Start with the Java version you are running (would be nice to know) and 
then list the certs.  Most likely you'll find, see the issue.  Just 
remember that running a java program isn't like a browser that gets 
regular updates to CA certs and intermediates. You need to maintain that 
keystore yourself, especially if you are on an older version of IBM i 
(ptf's may update the keystore, but I am not sure)

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
AWS Certified Cloud Practitioner
Microsoft Certified: Azure Fundamentals
Twitter - Sys_i_Geek  IBM_i_Geek

On 3/11/2022 12:08 PM, gio.cot via RPG400-L wrote:
> Hi all
>
> I'm try to consume a web service with this statement:
>
>   
>
> SELECT *
>
>      FROM JSON_TABLE(
>
>              Systools.HTTPPOSTCLOB(
>
>                  'https://wsurl/zzz/changexx',
>
>                  '<httpHeader> <header name="content-type"
> value="application/json" /> </httpHeader> ' ,
>
>                                         
>
>   
> '{"user":"MYUSER","psw":"mypass":"123","order_id":"6","sts":"A","sub":"X"}')
> ,
>
>              '$'
>
>              COLUMNS(
>
>                  "status" VARCHAR(30) PATH 'lax $.status' DEFAULT '' ON
> EMPTY,
>
>                  "err" VARCHAR(1024) PATH 'lax $.err' DEFAULT '' ON EMPTY
>
>              )
>
>          ) AS x;
>
>   
>
> but i receive this error:
>
>   
>
> Message: [SQL4302] The Java stored procedure or user-defined function
> SYSTOOLS.HTTPPOSTCLOB and the specific name HTTPP00013 aborted with an error
> "com.ibm.jsse2.util.h: PKIX path building failed:
> java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could
> not build a valid CertPath.; internal cause is:
>
> java.security.cert.CertPathValidatorException: The certificate expired at
> Sat May 30 12:48:38 CEST 2020; internal cause is:
>
> java.security.cert.CertificateExpiredException: NotAfter: Sat May 30
> 12:48:38 CEST 2020". It causes  . . . : The Java stored procedure or
> user-defined function was aborted with a Java exception. If the SQJAVA
> component trace is active, the component trace for the job contains a Java
> stack for the interrupted method. Correction. . : Debug the Java method to
> eliminate the error.
>
>   
>
> I'm running V/R2
>
>   
>
> Which could be the problem ?
>
>   
>
> Thanks in advance