on 04-13-2010 6:10 AM
Hi All,
Following Error coming in IE and in AE (receiver SOAP adapter) in PI 7.1
Message processing failed. Cause: com.sap.engine.interfaces.messaging.api.exception.MessagingException: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
We have successfully installed Certificate in Trust Key store in J2EE.
The interesting part is this interface is running successfully couple of days and on other day message is getting errored out for above reason. Again next day interface running successfully. I am totally confused and i am not sure for what reason it is erroring and where to check.
IT is some thing like ON and OFF running. Interface Pattern Used _ABAP Proxy (ASYNC) - BPM - (SYNC) WebService_
Please advice
Thanks
VR
Hi Vick,
It seems I have a similar problem, SOAP calls running OK for a while and failing seemingly random with the error "Peer certificate rejected by ChainVerifier". Did you ever find the cause of your problem and (even more interesting the solution?
thanks
Michel c
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Michel,
There are few reasons for such an error which I am listing below:
1. The server certificate is invalid/expired.
2. The server certificate has a server chain i.e. certificate A signed by B and B signed by root certificate C. For SAP PI its important to have the certificate chain in correct sequence which means A->B->C in that order. Most of the times this is the reason you get the error Server Certificate rejected by Chain Verifier.
3. SAP PI relies on IAIK libraries for SSL communication. Now there are some specific versions of IAIK which had problems, so you need to install the corrected patched version fo IAIK which SAP would be able to check and recommend.
As this problem happens intermittently, I think point 3 is something which you can find out else also check for Point 2.
Best Regards,
Pratik
I have noticed the message is using SOAP: request message entering the adapter with user J2EE_GUEST
Can the message enter with J2EE_GUEST User? for HTTPS - Receiver Adapter? or it has to use right user name?
Please Advice
Thanks
VR
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
86 | |
10 | |
10 | |
9 | |
7 | |
7 | |
6 | |
5 | |
4 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.