Summary:

If Definition Center doesn't send email notifications as expected, you may be experiencing an issue with the way we handle insecure SMTP communication. We opportunistically upgrade connections to use TLS if the SMTP server supports it. The only case in which this causes a problem is when the server supports TLS but the certificate is not known to the Definition Center server. To find out if you're experiencing this issue, check for the following error in the SMTP log (iRise\DefCenter\Tomcat\logs\smtp.log):

Could not convert socket to TLS (javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)

Fix:

If you find the above error in your SMTP log, you can resolve the issue one of two ways:

Obtain the appropriate TLS root and intermediate certificates from the SMTP server and importing them into Java’s trusted certificate store, so that the TLS upgrade is successful. Here are the commands to run in a command prompt:

cd \iRise\DefCenter\jvm64\jre\bin
keytool -import -trustcacerts -file <SMTP certificate path and file name> -alias <any name you choose to identify the certificate by> -keystore \iRise\DefCenter\jvm64\jre\lib\security\cacerts

We can force DefCenter to use an insecure connection to the SMTP server by making the following replacement in iRise\DefCenter\Tomcat\webapps\iRise\WEB-INF\classes\camel-context.xml:

Find and change this line:

<endpoint id="mailServer" uri="#{T(com.irise.dc.admin.web.smtp.URIConstructor).getURI('${mail.protocol}','${mail.host}','${mail.port}','${mail.smtp.username}','${mail.smtp.password2}','${mail.sender.address}')}"/>

<endpoint id="mailServer" uri="smtp://host:port?replyTo=FIRST%20LAST%20%3CNAME%40DOMAIN.COM%3E"/>

where FIRST%20LAST should be replaced with the Sender Name value (%20 represents a space in the name), and NAME%40DOMAIN.COM should be replaced with the Sender Email value (%40 represents the @ symbol). %3C and %3E represent < and >, respectively and should surround the address.

Please contact iRise Support if you need assistance with either steps above.