Error trying to install ESF Modbus Driver from Marketplace

[alexcorvis84]

Hi,

I'm trying to install the ESF Modbus Driver from Eclipse Marketplace in a Eclipse Kura version 5.3.0 installed in a RaspberryPi 4.

Once dragged, It fails with the following error:

2023-11-10T10:32:17,722 [qtp29012713-100] INFO  o.e.k.w.s.s.FileServlet - Installing package...
2023-11-10T10:32:17,723 [DeploymentAgent] INFO  o.e.k.d.a.i.DeploymentAgent - About to install package at URL https://kura-repo.dev.everyware.io/drivers/5.2.0-RELEASE/ESF/com.eurotech.modbus.driver_1.0.403.dp
2023-11-10T10:32:17,856 [DeploymentAgent] INFO  o.e.k.c.s.SslManagerServiceImpl - Creating a new SSLSocketFactory instance
2023-11-10T10:32:17,878 [DeploymentAgent] INFO  o.e.k.c.s.SSLSocketFactoryWrapper - SSL Endpoint Identification enabled.
2023-11-10T10:32:18,365 [DeploymentAgent] ERROR o.e.k.d.a.i.DeploymentAgent - Exception installing package at URL https://kura-repo.dev.everyware.io/drivers/5.2.0-RELEASE/ESF/com.eurotech.modbus.driver_1.0.403.dp
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at sun.security.ssl.Alert.createSSLException(Alert.java:131)
	at sun.security.ssl.TransportContext.fatal(TransportContext.java:331)
	at sun.security.ssl.TransportContext.fatal(TransportContext.java:274)
	at sun.security.ssl.TransportContext.fatal(TransportContext.java:269)
	at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)
	at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)
	at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)
	at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)
	at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)
	at sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)
	at sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)
	at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1401)
	at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1309)
	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)
	at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:559)
	at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:197)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1572)
	at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1500)
	at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
	at sun.net.www.protocol.https.HttpsURLConnectionImpl.getResponseCode(HttpsURLConnectionImpl.java:352)
	at org.eclipse.kura.deployment.agent.impl.DeploymentAgent.getFileFromRemote(DeploymentAgent.java:417)
	at org.eclipse.kura.deployment.agent.impl.DeploymentAgent.installDeploymentPackageInternal(DeploymentAgent.java:364)
	at org.eclipse.kura.deployment.agent.impl.DeploymentAgent.execInstall(DeploymentAgent.java:259)
	at org.eclipse.kura.deployment.agent.impl.DeploymentAgent.lambda$1(DeploymentAgent.java:215)
	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
	at java.lang.Thread.run(Thread.java:750)

Then I've followed the steps given in this online docs:

If the application is an official Eurotech bundle for ESF, the certificate should be already bundled in your ESF installation.

In case of a third-party endpoint, proceed as follows:

    From your local PC, download the certificate chain with this command:

openssl s_client -showcerts -connect <server-URL>:443

    Copy the resulting certificate and import it in the ESF SSLKeystore.

After getting the certificate with my server URL and adding into SSLKeystore, I'm still receiving the same error when trying to install it.

Rebooting the RPi didn't help either.

How can I fix it?

Many thanks in advance.

[mattdibi]

Hello there,

this is probably due to the fact that you added the Eclipse Marketplace certificate but, for ESF bundles, the URL hits a different server with a different certificate (see About to install package at URL https://kura-repo.dev.everyware.io log line). Try adding that certificate or download it from the URL you see in the log and then install it from the Kura UI

[alexcorvis84]

Thank you @mattdibi ! It worked like a charm!

Btw, it should be commented on the official docs as it might help other users facing the same error.