SSL Authentication in PI 7.3 SOAP Channel

[Former Member]

Hi Experts, 

This is an Idoc to web service scenario wherein we are sending information to third party via web service using https url.

Other than graphical mapping we are using java mapping, to fetch the session id in order to maintain session with third party webservice for sending the data.

In 7.0 we were using only userid and password to authenticate the webservice.

No SSL Authentication/certificates were being used by us or by the third party.

After PI upgrade from 7.0 to 7.3, during testing the soap channel started giving the below error:

 

SSL Certificate exception: peer certificate rejected by chain verifier

 

No changes were made by third party or at our end except fo rthe upgrade.

As of now we have tried below options to make the scenario work:

1) Installed certificates : Does not work

2) Installed Patch : Does not work

3) Recompiled java mapping on java version 1.6.0_32 : Does not work

Please help me resolve this issue.

Thanks

Pooja

[bhavesh_kantilal · Accepted solution]

Pooja,

You would need to enable SSL with Unrestricted JCA and Install / Load the Certificate into the TrustedCAs Keystore view?

Probabaly your XI Environment has Unrestricted JCA installed. By default after the upgrade this will not be the case.

Has this been done?

Regards,

Bhavesh

[Former Member · Accepted solution]

Hi Bhavesh,

Thanks for the reply. We were able to resolve the issue few days back with the help of SAP.

It worked with patch installation and addition of certificates in trusted ca key store.

Thanks.

Pooja