A2200220: Peer Certificate expired

[manna_das]

Hello All,

The end user getting the error as mentioned above. does anybody know the exact problem. Which certificate got expired here? I have checked every certificate, none is expired.

Kind Regards

MAD

[manna_das · Accepted solution]

We have very strange situation here, on the first attempt user is denied to enter into SAP system with SSO and in second attempt user is allowed to enter via SSO.

This issue is occurring in other sap systems too, we updated secure login library from version 1.0 to 2.0 so now the error is gone.

Don't know what is happening here.

Kind Regards

MAD

[former_member200373 · Accepted solution]

Hello Manna,

A2200200 means that the server´s SNC certificate is expired from the client´s perspective, which can be either not valid yet or not valid anymore.

In your case, either the client side clock is out of sync, or your old Secure Login Library 1.0 was not able to successfully verify a certificate chain with PKIX trust model (i.e. correct calculation of overlapping validities of server and issuer certificate).

There have been several fixes in CommonCryptoLib or Secure Login Library 2.0 that are not part of the outdated Secure Login Library 1.0. So moving to the latest patch version is a good approach.

It´s even recommended to move from a stand-alone SLL to CCL.

-- Stephan

[manna_das · Accepted solution]

Hello Stephan,

Thanks for clearing the doubt. We will update the SLL to rest of the servers too.

Kind Regards

Manna