FTPS - Port and Error

[Former Member]

Hi Experts,

We have a scenario where we need to connect to external FTP'S server where client is very strict to security. Basically IDOC to flat file scenario.

We have followd below steps :-

1. The public cert/keys  provided by the client – Imported in to NWA –> Certificate &Keys -> service_ssl.

2. Port is - 11005.  Checked with TELNET only option from PI server.

3. . Anonymous LogIN

http://scn.sap.com/message/7146900

It is shwoing below error :-

ERROR - com.sap.aii.af.lib.util.concurrent.ResourcePoolException: Unable to create new pooled resource: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

Does FTPS support - 11005 port.

IS it client server keys issue ?

Thanks.

[Former Member · Accepted solution]

Hello,

Check two things:

1) Use CN name of the certificate instead of FTP IP address/host name

2) Make sure you have imported certificate in the proper order (root, intermediate)

Regarding port i thing other ports can also be used, but in my scenarios i always used  port 21

Thanks

Amit Srivastava

[Bhargavakrishna]

Hi,

try with FTP Login id and PWD in communication channel..

As said by amit, in most of the cases the port will be 21 only.. so confirm the port number from FTP provider..

Refer below links for the same

http://wiki.sdn.sap.com/wiki/display/TechTSG/Peer+certificate+rejected+by+ChainVerifier

http://wiki.sdn.sap.com/wiki/pages/viewpage.action?pageId=243630951&bc=true

http://scn.sap.com/message/5968344

http://scn.sap.com/thread/1396047

http://scn.sap.com/message/10515917

Hope it will give resolution for your issue..

Regards

Bhargava krishna

[ambrish_mishra]

Hi Anshul,

There are other threads on SDN which talk about the same error:

https://scn.sap.com/thread/1795531

http://scn.sap.com/message/7146900#7146900 you have already gone through it.

I think its a matter of certificate import and following the step by step process and you should be able to work it out.

I hope the mentioned port is opened.

Ideally you should work with the client security team while you are making these FTPs calls so they can check incoming traffic and suggest on which step the call is failing. If I were you, I will follow the set up guide and then set up a meeting and try to solve it while on call. Involve the Basis/networking expert in this call and see how it goes.

Hope it helps!

Ambrish