[cisco-voip] Java and custom UCCX

Wed Apr 15 20:30:35 EDT 2020

Haha oh dear, I totally forgot Tanner reached out and had an inventive way to get around this issue.. dynamically loading the classes.. which we think probably would have worked.

But honestly not going to sink anymore time into it at this stage.
Happy with it as an external proxy.

I did find a bug for the cert thing, but can't find the ID now 🙂

Cheers,

Tim
________________________________
From: Anthony Holloway <avholloway+cisco-voip at gmail.com>
Sent: Wednesday, 15 April 2020 4:03 PM
To: Tim Smith <tim.smith at enject.com.au>
Cc: voyp list, cisco-voip (cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] Java and custom UCCX

EXTERNAL SENDER WARNING. This message was sent from outside your organisation. Please do not click links or open attachments unless you recognise the source of this email and know the content is safe.

Thanks for the update.  Strange that the cert didn't work for you.  It used to be in 9.x and lower<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbst.cloudapps.cisco.com%2Fbugsearch%2Fbug%2FCSCue13884&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423220122&sdata=IfcEPbRSU%2FTGHgnGCbMS6e%2BMeFyJ1%2F%2Br84QJ55XMOaM%3D&reserved=0> that you'd need root access to add certs to the keystore, but not since v10.

On Tue, Apr 14, 2020 at 11:01 PM <tim.smith at enject.com.au<mailto:tim.smith at enject.com.au>> wrote:
Hey Anthony, been buried working on it 🙂 forgot to check back here.

Hope everyone is keeping safe!

I think probably was working with most of the guys you are thinking of there inc Cloverhound.
It managed to stump a lot of people, and we did end up digging pretty deep with a couple of great Cisco escalation guys too.
I think the only people that could solve it are really deep in the development team, and it's not really worth it.
The short answer is upgrade or offbox (because we have a nice version of this working in 11.x) already with no issues.

The big issue was the old JRE, and the lack of TLS 1.2.
All of the code was running off box with exactly the same versions etc, so it seemed to be something specific to UCCX, possibly a security measure or restriction.

Anyway, we wanted to run off box proxy, but we weren't permitted in this environment.
So we built off box in AWS (API Gateway and Lambda)
And it's working really nicely.

I think as you said below... no more Java..
Use the Set Steps if required (we have done that instead of the built in REST step)
And we have one custom class to override the certificate trust (as there also seems to be a bug with that in the version of UCCX - it doesn't trust things in it's trust store) 🙂

But yeah, no more Java seems like a good plan.

Cheers,

Tim

________________________________
From: Anthony Holloway <avholloway+cisco-voip at gmail.com<mailto:avholloway%2Bcisco-voip at gmail.com>>
Sent: Wednesday, 8 April 2020 6:54 AM
To: Tim Smith <tim.smith at enject.com.au<mailto:tim.smith at enject.com.au>>
Cc: voyp list, cisco-voip (cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>) <cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>>
Subject: Re: [cisco-voip] Java and custom UCCX

EXTERNAL SENDER WARNING. This message was sent from outside your organisation. Please do not click links or open attachments unless you recognise the source of this email and know the content is safe.

I see your post on the developer forums, and as as here, didn't get much in the way of a solution.  Did you ever end up moving past your hurdles and successfully solve this one?

On Thu, Mar 26, 2020 at 6:58 AM Pawlowski, Adam <ajp26 at buffalo.edu<mailto:ajp26 at buffalo.edu>> wrote:

I shunted in a new oracle jdbc jar to replace the existing one (and thus losing the entire database connection pooling framework that CCX has) because the in built one is archaic and doesn’t work with oracle encryption or modern rev, then wrote some java code to handle simple queries.

It works until it doesn’t want to – SU installs or system reboots sometimes the jar doesn’t load for … no given reason at all, then you have to reboot to bring it up hopefully.

As bad as it sounds if you’re stuck on that system would it be more reasonable to write a broker/proxy that can shuttle these requests for you?

Adam

From: cisco-voip <cisco-voip-bounces at puck.nether.net<mailto:cisco-voip-bounces at puck.nether.net>> On Behalf Of Anthony Holloway
Sent: Thursday, March 26, 2020 2:32 AM
To: Tim Smith <tim.smith at enject.com.au<mailto:tim.smith at enject.com.au>>
Cc: voyp list, cisco-voip (cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>) <cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>>
Subject: Re: [cisco-voip] Java and custom UCCX

I did a Java thing....once<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.cisco.com%2Ft5%2Fcontact-center%2Fhow-to-using-a-custom-java-class-in-uccx-5-x-soap-example%2Ftd-p%2F1029442&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423220122&sdata=B4BRlTGKfaYMaWAJ3p9LYrp0KXrdC9sRedCjHzCGfNI%3D&reserved=0>....never again man.  never again.

I would recommend posting in the UCCX community forum<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.cisco.com%2Ft5%2Fcontact-center%2Fbd-p%2F5926-discussions-contact-center&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423230116&sdata=rc303w7F1pNIJA3EU8pMx%2FU8EVR%2FqCMA8FHX7jHOUl4%3D&reserved=0>, as there are at least 2 or 3 regulars who I believe could help with this type of thing.

And, it's less active, but the developer section for UCCX<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fcommunity.cisco.com%2Ft5%2Fcontact-center%2Fbd-p%2Fj-disc-dev-contact-center&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423230116&sdata=TTAyZxnNSL9ICqwQ2K%2BlJ%2FMSKexFGKhq77o%2BzG7EtmY%3D&reserved=0> might be worth a shot too.

Last but not least, the dude's over at Cloverhound seem to love challenges, as they've competed in like a dozen Engineering Death match episodes.  Maybe ping them on Twitter<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Ftwitter.com%2Fcloverhound&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423240107&sdata=fsFRGaU9cAED0j%2FaTRK%2BpB4GonDoAGM%2FhUq3UzPHZGE%3D&reserved=0>.

Good luck.  I look forward to hearing the outcome.

On Wed, Mar 25, 2020 at 6:09 PM Tim Smith <tim.smith at enject.com.au<mailto:tim.smith at enject.com.au>> wrote:

Big guys, I should be more specific :)

Exact challenge

  *    UCCX 10.0 with JRE 1.6
  *   Does not support TLS 1.2
  *   We need to make a REST call with OAUTH and TLS 1.2
  *   Using bouncy castle to try and get around the JRE TLS limitation

Should also note we have working on 11.x with JRE 7 and no bouncy castle. (Which sounds less fun, but it works better :)

Cheers,

Tim

Get Outlook for iOS<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinkprotect.cudasvc.com%2Furl%3Fa%3Dhttps%253a%252f%252faka.ms%252fo0ukef%26c%3DE%2C1%2C8phXTi73WddEIOG_rUCgOD6q7ZqWMhfacXQ9l8evIaf-M4z2b-HHpgLNPUL5tD1GG_8BYCvEMdy2tjezqShwJiO9rCr2cekH_njaEACr3Tk%2C%26typo%3D1&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423240107&sdata=wz5T65GqlE%2BQLq59Gi9YjhWg6gTVuKahWclX2q3YH%2FQ%3D&reserved=0>

________________________________

From: Tim Smith
Sent: Thursday, March 26, 2020 10:00:07 AM
To: voyp list, cisco-voip (cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>) <cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>>
Subject: Java and custom UCCX

Hi guys,

I’m not sure if we are supposed to do this.

I am stuck on a Java and UCCX issue.

We are trying to run a custom class, and we are having issues with the loading of the class.

It seems very Cisco specific as we can run it anywhere else compiled and ran on same JDK/JRE etc.

We’ve put a lot of hours in so far and tried a lot of things, but at a bit of a roadblock.

I know there are some great UCCX people on here. Wondering if anyone might be up for a quick chat on Webex Teams.

Cheers,

Tim

Get Outlook for iOS<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinkprotect.cudasvc.com%2Furl%3Fa%3Dhttps%253a%252f%252faka.ms%252fo0ukef%26c%3DE%2C1%2Ct8tEjZJ9Gyr7mA9AjNPOGAdCuW66OH00JM4c1Vq6-JwrhUU-w5QOQWc_2rV4ejxIoRSBwo_-XbgKG1YBKZd-YU2Jmz8kbXmlBFPPVYO-vwUwyg%2C%2C%26typo%3D1&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423250108&sdata=gonywywMHAufmEYsF%2F2CJ1uBo0B6b60oG8og2L34q7M%3D&reserved=0>

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinkprotect.cudasvc.com%2Furl%3Fa%3Dhttps%253a%252f%252fpuck.nether.net%252fmailman%252flistinfo%252fcisco-voip%26c%3DE%2C1%2CHCxr10uF7ITcfNpzP2eI15FpskJ7_xQtjfsvwChM_9T4YYOySDmFF9h1THFgUMzQOUey2PVmM_sMhnq7Mt-bH34ceaPs1XhJf_mJIz6nI32vvt6cUr1DQDaMft9u%26typo%3D1&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423250108&sdata=9Qe0TeZTfrpBpM%2F3uNSNkkvo364WWySj%2BTjCKhiV%2BvI%3D&reserved=0>

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip<https://aus01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flinkprotect.cudasvc.com%2Furl%3Fa%3Dhttps%253a%252f%252fpuck.nether.net%252fmailman%252flistinfo%252fcisco-voip%26c%3DE%2C1%2CuAAmAhVLXODpy7ffvQUl2AruuvzJBcJjUiuUf_N21VkDVV4iYsFqgtId5XuHNSX453qHKPQX9qsv5NN4lj7l8bPDs3-Jeb7Pu6c56CikeCoaA4A-B81JAFx_Xw%2C%2C%26typo%3D1&data=02%7C01%7Ctim.smith%40enject.com.au%7C4c41b79423a4427868b308d7e102cae5%7Ce676c09ff1b242488a361f228b8620f8%7C0%7C0%7C637225274423260099&sdata=3toihrpQV6bORuFtExhX8Xdf8KFPwY2NHGHT8%2FRbBHg%3D&reserved=0>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20200416/c4095f2b/attachment.htm>