Adding a connected environment in the Admin Console for an Appian environment that has trusted IPs configured fails with the following error:
The following error is also observed in the application server log:
ERROR com.appiancorp.connectedenvironments.logging.DevOpsInfrastructureAuditLogger - class="error">[ERROR, null, null, https://<other_site_subdomain>.appiancloud.com/suite, OUTGOING, null, null, null, null, null, null, null, null, null, URL did not return a valid public key: https://<other_site_subdomain>.appiancloud.com/suite]
The following PKIX error may also be present in the application server log:
sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
There are two potential causes that could result in this issue:
The Appian Cloud region IP addresses have not been added to the other environment's IP allow list and connection attempts are being blocked.
Certain URL paths under /suite that are used by the Devops: Infrastructure connection are being blocked.
Open a case with Appian Support to add the Appian Cloud region's IP addresses to the environment being added as a connected environment. See KB-1582 for specific IP addresses to add based on region.
Ensure that any URL starting with the following pattern is exempt from any allow list on both servers involved with the Devops: Infrastructure operation:
This article applies to Appian versions 19.1 and later.
Last Reviewed: June 2020
© 2020 Appian. All rights reserved.