on 09-16-2014 2:46 PM
Hi, I have a question on SMP3 and AppDevelopment:
I have SMP3 SP03 (3.0.3) installed and running. I have an application installed/published with app specific configurations displaying in the SAP Administration center. I am receiving the "I am here" via the http request. When connecting using the TestEnvironment, I am receiving the "A certificate needed to verify the certificate received cannot be found" error. I have followed the Sybase documentation (all three Authentication Certificates) to create/install the certificate, albeit some of the documentation doesn't align with SMP3 when updating via the "console", but I am still unable to resolve the certificate error. Are there any tricks or other documents I should consider?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Agentry v7.0.3.605
Ps. I removed the "Bad Key" error, by removing the "authenticationCertificateStore" entries I had added earlier when trying to match up the settings we had used in previous versions of Agentry Server (with self-signed Certs). I restarted the SMP server, but the error is the same.
I have installed the Agentry Client (win32) and am receiving the same error as the ATE.
I have installed the ATE on a different machine, and prior to installing the "smp_crt.cer", I received this error:
“Certificate received is not found in the trusted list, nor
can it be traced to a trusted root.”
I then installed the "smp_crt.cer" as instructed and the original error has returned. From the ATE events.log, I have the following:
09/16/2014 10:41:18, 1, 22,2148074248, Thr 21108, Error #2148074248(0x80090308): The token supplied to the function is invalid
, ..\..\..\..\Socket\win32\schannelSSLsockets.cpp#615:SchannelSSLstreamSocket::handshake
09/16/2014 10:41:22, 1, 25, 0, Thr 21108, Certificate received is not found in the trusted list, nor can it be traced to a trusted root., ..\..\..\..\Socket\win32\schannelSSLsockets.cpp#786:SchannelSSLstreamSocket::validateContextCertificates
09/16/2014 10:43:53, 1, 22,2148074279, Thr 21108, Error #2148074279(0x80090327): An unknown error occurred while processing the certificate.
, ..\..\..\..\Socket\win32\schannelSSLsockets.cpp#615:SchannelSSLstreamSocket::handshake
Subsequent attempts have only repeated the SchannelSSLstreamSocket::handshake error.
I have also disabled all firewall protection...
Jay,
Did you get this resolved?
It is certainly implying the certificate presented by the server isn't trusted.
I would suggest connecting from IE to the URL to get the "I am here!" message and then click on the lock in the address bar to view the certificate presented. Confirm the host name and re-install to the Trusted Root Certification Authorities store on the device.
Then try again from the ATE on the same machine to see if that changes anything.
What kind of certificate is it? Is it a self-signed one or provided by a third party?
--Bill
No, this is still not resolved.
I confirmed the Certificate information is correct and even installed it "again" from the details found when viewing the CERT via the IE "lock". I believe this certificate is the one installed as part of the SMP installation which Stephen had asked that I use. I see no way to adjust this since receiving a "bad key" from manual edits to the Agentry.ini...
I notice the following in the SMP-server log file:
2014 09 22 11:40:17#0-400#WARN#com.sybase.security.core.CertificateValidationLoginModule##anonymous#http-bio-8081-exec-6###The certificate (chain) is not valid. |
User | Count |
---|---|
87 | |
10 | |
10 | |
10 | |
7 | |
6 | |
6 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.