<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Hi Andrea,</div><div><br data-mce-bogus="1"></div><div>I am currently working on some demonstration regarding the connector and I found that the following certificates are the right ones to use regarding this connector:</div><div>- DigiCert Global Root CA<br></div><div>- DigiCert Global Root G2</div><div><br data-mce-bogus="1"></div><div>Just add them to the midPoint keystore and restart midPoint.</div><div><br data-mce-bogus="1"></div><div>I hope this helps.</div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>From: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>To: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br><b>Cc: </b>"Andrea Picconi" <andrea.picconi@innovery.net>, "Alessia Zuin" <alessia.zuin@innovery.net><br><b>Sent: </b>Tuesday, October 26, 2021 10:13:48 AM<br><b>Subject: </b>[midPoint] The validation of the certificate doesn't work with Microsoft Graph API Connector<br></div><div><br><style style="display:none">/*<![CDATA[*/P {
margin-top: 0;
margin-bottom: 0;
}
/*]]>*/</style></div><div data-marker="__QUOTED_TEXT__">
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
Hi all,</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<br>
</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
I'm testing the Microsoft Graph API Connector to be able to connect Midpoint with Azure, but I have some problems with the certificate that Midpoint is using to create a secure connection to comunicate with Azure.<br>
I have install the connector inside the correct folder, I have create the certificate .der and put it inside the keystore of Midpoint but it wasn't working, so after that I have added that certificate inside the keystore of the jvm that Midpoint use at the
start up. After this I have resterted the virtual machine but I still get the same error.<br>
</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<br>
</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
Here, the error:</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<i>"<span style="font-family:'segoe ui' , 'system-ui' , 'apple color emoji' , 'segoe ui emoji' , sans-serif;font-size:14px">org.identityconnectors.framework.common.exceptions.ConnectionFailedException(java.util.concurrent.ExecutionException:
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)->java.util.concurrent.ExecutionException(javax.net.ssl.SSLHandshakeException:
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)->javax.net.ssl.SSLHandshakeException(PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException:
unable to find valid certification path to requested target)->sun.security.validator.ValidatorException(PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)->sun.security.provider.certpath.SunCertPathBuilderException(unable
to find valid certification path to requested target)"</span></i></div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<br>
</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
Any idea?</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<br>
</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
Thank you and regards,</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
Andrea</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<br>
</div>
<div style="font-family:'calibri' , 'arial' , 'helvetica' , sans-serif;font-size:12pt;color:rgb( 0 , 0 , 0 );background-color:rgb( 255 , 255 , 255 )">
<br>
</div>
<br>_______________________________________________<br>midPoint mailing list<br>midPoint@lists.evolveum.com<br>https://lists.evolveum.com/mailman/listinfo/midpoint<br></div><div><br></div><div data-marker="__SIG_POST__">-- <br></div><div>Best Regards,<br><br>Matus Macik | Developer and Identity Management Engineer<br>matus.macik@evolveum.com | www.evolveum.com<br>Evolveum</div></div></body></html>