Troubleshooting Platform Integration on an HTTPS Server

 

When Zend Platform is installed on an HTTPS server which has a problem with its security certificate, PDT will not be able to display Platform Events in the Platform Events view. This is because the JVM that executes the Studio does not consider the Web server as a "trusted identity".
 

In this case, when you try to connect to Zend Platform through the Platform Events view, you will receive the following error message:
"Unable to verify the identity of 'https://<MyServer>/ZendPlatform' as a trusted site".

 

This procedure describes how to add the certificate for the Web server on which your Zend Platform is installed to your JVM, so that Studio will consider it 'safe':

Note:

The following instructions are only applicable to Internet Explorer.

 

 

Instructions on how to complete a procedure

To add the Web server certificate to the JVM:

  1. Open Internet Explorer and enter your Zend Platform URL.
    An error message is displayed.

 

  1. Click “Continue to this website”.
    You will be taken to the Zend Platform login page and a Certificate Error notification will appear next to the address bar:

  1. Click on the “Certificate Error” next to the URL.
    A 'Certificate Invalid' popup will be displayed.

  2. Click on the "View certificates" link at the bottom of the popup to display the certificate details.

  1. Select the Details tab.

  2. Click “Copy to File…”.
    The Certificate Export wizard will launch.

  1. Click Next.
    You will be asked to select an export file fomat.

  2. Select the "DER encoded binary X.509" format and click Next.

  3. In the File name field, browse to your JVM directory.
    By default, this is located in:
    Windows/Linux:
    <Studio_Directory>/jre
    Mac:  
    /System/Library/Frameworks/JavaVM.framework/Home

  4. In the File Name field, enter 'MyServer'.

  5. Click Next.
    A summary screen will be displayed.

  6. Click Finish.
    The certificate will be exported to the specified destination.

  7. Run the following command in your CLI:
    <JVM_Directory>/bin/keytool -import -trustcacerts -alias <any_unique_name> -file <JVM_Directory>/MyServer.cert -keystore <JVM_Directory>/lib/security/cacerts

Note:

On Linux/Mac, run the command with ‘sudo’.

Note:

If you saved MyServer.cert to a location other than the JVM Directory, edit the <JVM_Directory>/MyServer.cert -keystore command accordingly.

  1. When asked for a password for the JVM certificate store, enter 'changeit'.  

  2. If asked whether you trust the certificate source, enter 'Yes'.

  3. Restart PDT.

The Web server will now be treated as 'safe' and you will be able to retrieve Zend Platform Events.

 

 

Related Links

Related Links:

Troubleshooting Zend Platform Integration

Integrating with Zend Platform

Accessing and Using the Zend Platform Event List View