topic Odd security exception with GET /alfresco/service/cmis/query in Alfresco Archive https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269819#M222949 <HTML><HEAD></HEAD><BODY><SPAN>Hi all,</SPAN><BR /><BR /><SPAN>I'm new to Alfresco and I'm trying to figure out a bizarre security exception I'm getting using this service. The Alfresco server is on another machine (community edition) to my local machine and I'm using PHP with Curl. We're going to be using the full version of Alfresco however we're trying to get to grips with it.</SPAN><BR /><BR /><SPAN>First I authenticate using:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>GET /alfresco/service/api/login?u={username}&amp;pw={password?}<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>which works fine and I am returned a response of "TICKET_xxxx etc". I then attempt to call:</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>/alfresco/service/cmis/query?alf_ticket=TICKET_&lt;ticketvaluehere&gt;&amp;q=SELECT+cmis%3Aname+FROM+cmis%3Adocument <SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>this returns a security error?</SPAN><BR /><BR /><BLOCKQUOTE class="jive-quote">Alfresco &nbsp;&nbsp;&nbsp;Web Script Status 500 - Internal Error<BR /><BR />The Web Script /alfresco/service/cmis/query has responded with a status of 500 - Internal Error.<BR /><BR />500 Description:&nbsp;&nbsp;&nbsp;An error inside the HTTP server which prevented it from fulfilling the request.<BR /> <BR />Message:&nbsp;&nbsp;&nbsp;09090029 Wrapped Exception (with status template): 090914717 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/cmis/query.get.js': 090914716<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;java.security.cert.CertificateExpiredException - NotAfter: Fri Aug 17 13:04:11 BST 2012<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;sun.security.x509.CertificateValidity.valid(CertificateValidity.java:256)<BR />&nbsp;&nbsp;&nbsp;sun.security.x509.X509CertImpl.checkValidity(X509CertImpl.java:570)<BR />&nbsp;&nbsp;&nbsp;sun.security.provider.certpath.BasicChecker.verifyTimestamp(BasicChecker.java:157)<BR />&nbsp;&nbsp;&nbsp;sun.security.provider.certpath.BasicChecker.check(BasicChecker.java:109)<BR />&nbsp;&nbsp;&nbsp;sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:117)<BR />&nbsp;&nbsp;&nbsp;sun.security.provider.certpath.PKIXCertPathValidator.doValidate(PKIXCertPathValidator.java:328)<BR />&nbsp;&nbsp;&nbsp;sun.security.provider.certpath.PKIXCertPathValidator.engineValidate(PKIXCertPathValidator.java:178)<BR />&nbsp;&nbsp;&nbsp;java.security.cert.CertPathValidator.validate(CertPathValidator.java:250)<BR />&nbsp;&nbsp;&nbsp;sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:275)<BR />&nbsp;&nbsp;&nbsp;sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:263)<BR />&nbsp;&nbsp;&nbsp;sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:173)<BR />&nbsp;&nbsp;&nbsp;sun.security.validator.Validator.validate(Validator.java:218)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1185)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:136)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:893)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1138)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:632)<BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)<BR />&nbsp;&nbsp;&nbsp;java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)<BR />&nbsp;&nbsp;&nbsp;java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:506)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:2114)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1096)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:398)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)<BR />&nbsp;&nbsp;&nbsp;org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.search.impl.solr.SolrQueryHTTPClient.executeQuery(SolrQueryHTTPClient.java:318)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.search.impl.solr.SolrQueryLanguage.executeQuery(SolrQueryLanguage.java:49)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.search.impl.solr.SolrCMISQueryServiceImpl.query(SolrCMISQueryServiceImpl.java:93)<BR />&nbsp;&nbsp;&nbsp;sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />&nbsp;&nbsp;&nbsp;sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<BR />&nbsp;&nbsp;&nbsp;sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.management.subsystems.SubsystemProxyFactory$1.invoke(SubsystemProxyFactory.java:65)<BR />&nbsp;&nbsp;&nbsp;org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)<BR />&nbsp;&nbsp;&nbsp;org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)<BR />&nbsp;&nbsp;&nbsp;$Proxy140.query(Unknown Source)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.cmis.rest.CMISScript.query(CMISScript.java:683)<BR />&nbsp;&nbsp;&nbsp;sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)<BR />&nbsp;&nbsp;&nbsp;sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)<BR />&nbsp;&nbsp;&nbsp;sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)<BR />&nbsp;&nbsp;&nbsp;java.lang.reflect.Method.invoke(Method.java:597)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.MemberBox.invoke(MemberBox.java:155)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.NativeJavaMethod.call(NativeJavaMethod.java:243)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.optimizer.OptRuntime.call2(OptRuntime.java:76)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.gen.c21._c0(file:/D:/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts/org/alfresco/cmis/query.get.js:42)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.gen.c21.call(file:/D:/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts/org/alfresco/cmis/query.get.js)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.ContextFactory.doTopCall(ContextFactory.java:393)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.ScriptRuntime.doTopCall(ScriptRuntime.java:2834)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.gen.c21.call(file:/D:/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts/org/alfresco/cmis/query.get.js)<BR />&nbsp;&nbsp;&nbsp;org.mozilla.javascript.gen.c21.exec(file:/D:/Alfresco/tomcat/webapps/alfresco/WEB-INF/classes/alfresco/templates/webscripts/org/alfresco/cmis/query.get.js)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.jscript.RhinoScriptProcessor.executeScriptImpl(RhinoScriptProcessor.java:483)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.jscript.RhinoScriptProcessor.execute(RhinoScriptProcessor.java:191)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.processor.ScriptServiceImpl.execute(ScriptServiceImpl.java:212)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.processor.ScriptServiceImpl.executeScript(ScriptServiceImpl.java:174)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.web.scripts.RepositoryScriptProcessor.executeScript(RepositoryScriptProcessor.java:102)<BR />&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.AbstractWebScript.executeScript(AbstractWebScript.java:1193)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.cmis.rest.CMISWebScript.executeScript(CMISWebScript.java:46)<BR />&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.DeclarativeWebScript.execute(DeclarativeWebScript.java:86)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.web.scripts.RepositoryContainer$2.execute(RepositoryContainer.java:393)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.transaction.RetryingTransactionHelper.doInTransaction(RetryingTransactionHelper.java:388)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecute(RepositoryContainer.java:462)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.web.scripts.RepositoryContainer.transactionedExecuteAs(RepositoryContainer.java:500)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.web.scripts.RepositoryContainer.executeScript(RepositoryContainer.java:316)<BR />&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:372)<BR />&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.AbstractRuntime.executeScript(AbstractRuntime.java:209)<BR />&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.servlet.WebScriptServlet.service(WebScriptServlet.java:118)<BR />&nbsp;&nbsp;&nbsp;javax.servlet.http.HttpServlet.service(HttpServlet.java:717)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<BR />&nbsp;&nbsp;&nbsp;org.alfresco.web.app.servlet.GlobalLocalizationFilter.doFilter(GlobalLocalizationFilter.java:58)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)<BR />&nbsp;&nbsp;&nbsp;org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)<BR />&nbsp;&nbsp;&nbsp;org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.java:861)<BR />&nbsp;&nbsp;&nbsp;org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.process(Http11AprProtocol.java:579)<BR />&nbsp;&nbsp;&nbsp;org.apache.tomcat.util.net.AprEndpoint$Worker.run(AprEndpoint.java:1584)<BR />&nbsp;&nbsp;&nbsp;java.lang.Thread.run(Thread.java:662)<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;java.security.cert.CertPathValidatorException - timestamp check failed<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:139)<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;sun.security.validator.ValidatorException - PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:289)<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;javax.net.ssl.SSLHandshakeException - sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;org.alfresco.repo.search.impl.lucene.LuceneQueryParserException - 090914716<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.search.impl.solr.SolrQueryHTTPClient.executeQuery(SolrQueryHTTPClient.java:364)<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;org.alfresco.scripts.ScriptException - 090914717 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/cmis/query.get.js': 090914716<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;org.alfresco.repo.jscript.RhinoScriptProcessor.execute(RhinoScriptProcessor.java:195)<BR />&nbsp;&nbsp;&nbsp; <BR />Exception:&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.WebScriptException - 09090029 Wrapped Exception (with status template): 090914717 Failed to execute script 'classpath*:alfresco/templates/webscripts/org/alfresco/cmis/query.get.js': 090914716<BR />&nbsp;&nbsp;&nbsp; <BR />&nbsp;&nbsp;&nbsp;org.springframework.extensions.webscripts.AbstractWebScript.createStatusException(AbstractWebScript.java:970)<BR />&nbsp;&nbsp;&nbsp; <BR />Server:&nbsp;&nbsp;&nbsp;Community v4.0.0 (4003) schema 5,025<BR />Time:&nbsp;&nbsp;&nbsp;09-Oct-2012 14:39:48<BR />&nbsp;&nbsp;&nbsp; <BR />Diagnostics:&nbsp;&nbsp;&nbsp;Inspect Web Script (org/alfresco/cmis/query.get)</BLOCKQUOTE><BR /><SPAN>However using something like</SPAN><BR /><BR /><PRE class="language-none line-numbers"><CODE>/api/cmis?alf_ticket=TICKET_&lt;ticketvaluehere&gt;<SPAN class="line-numbers-rows"><SPAN>‍</SPAN></SPAN></CODE></PRE><BR /><SPAN>is fine. Any thoughts?</SPAN><BR /><BR /><SPAN>Cheers,</SPAN><BR /><SPAN>Paul.</SPAN></BODY></HTML> Tue, 09 Oct 2012 14:02:08 GMT probedb 2012-10-09T14:02:08Z Odd security exception with GET /alfresco/service/cmis/query https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269819#M222949 Hi all,I'm new to Alfresco and I'm trying to figure out a bizarre security exception I'm getting using this service. The Alfresco server is on another machine (community edition) to my local machine and I'm using PHP with Curl. We're going to be using the full version of Alfresco however we're tryin Tue, 09 Oct 2012 14:02:08 GMT https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269819#M222949 probedb 2012-10-09T14:02:08Z Re: Odd security exception with GET /alfresco/service/cmis/query https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269820#M222950 <HTML><HEAD></HEAD><BODY><SPAN>Please see </SPAN><A href="https://forums.alfresco.com/en/viewtopic.php?f=2&amp;t=45940" rel="nofollow noopener noreferrer">https://forums.alfresco.com/en/viewtopic.php?f=2&amp;t=45940</A></BODY></HTML> Tue, 09 Oct 2012 14:57:17 GMT https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269820#M222950 mikeh 2012-10-09T14:57:17Z Re: Odd security exception with GET /alfresco/service/cmis/query https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269821#M222951 <HTML><HEAD></HEAD><BODY><SPAN>Cheers Mike, you replied before I managed to reply and say it was sorted <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://connect.hyland.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></SPAN></BODY></HTML> Tue, 09 Oct 2012 15:00:10 GMT https://connect.hyland.com/t5/alfresco-archive/odd-security-exception-with-get-alfresco-service-cmis-query/m-p/269821#M222951 probedb 2012-10-09T15:00:10Z