Fix GrafanaBox Cert Error

If you are using Helm/Grafana and OpenNMS is not able to validate the certificate chain on the Grafana instance, you may get the following message on your home page:

Grafana Dashboards
🔧sun.security.validator.ValidatorException: PKIX path building failed: un.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The fix for this is to make sure the server’s trust store has the proper root certificate for your certificate authority.

CentOS

  • Copy the .crt file to /etc/pki/ca-trust/source/anchors on your server
  • run update-ca-trust extract

Debian/Ubuntu

  • Copy the .crt file to /usr/local/share/ca-certificates/ on your server
  • run update-ca-certificates

This should allow the system to properly verify the server certificates for displaying Grafana dashboards on your OpenNMS home page.

2 Likes