on 05-12-2015 11:30 AM
Hi PI Experts,
Please help and provide your valuable inputs so that below issue is sorted.
Summary,
Basis team have installed HTTPS(SSL) and disabled HTTP in PI DEV system 7.4 AEX.
As PI consultant I have done below changes:
XPI Service: All config Service - all https port to 443 and secure connection to messaging,all
XPI Service: CPACache Service SLD https port to 443
HTTPS PI host is opening correctly in Internet Explorer.
I am getting below errors:
1.Destinations (SLD_Client and SLD_DATASUPPLIER) throwing following error: Error while silently connecting: org.w3c.protocol.http.HTTPException: Peer Certificate rejected by chainVerifier.( I have configured the keystore mentioned in Configuration - Security - SSL in NWA)
2.ID objects not opening and throwing same error: https://PIhostname:443/rep/query/int?container=any!details:caught exception message: peer certificate rejected by Chain Verifier
3. Error while doing component monitor and PI components(Central Adapter Engine, Mapping runtime, ID and ESR ) not VISIBLE.
Let me know if other info is required for your inputs.
thanks in advance.
Regards,
SV
Hi,
Make sure that you have loaded there CA into your Cert Storage on NWA with the Entire chain that is provided by them or you can get the chain from internet explorer by copying that endpoint into internet explorer.
Also make sure that they have your cert. After implementing the certs restart PI system.
It sounds you are running on a single stack. Make sure that you logging is turned on on ICO.
Regards,
Jannus Botha
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Jannus,
We have tried restarting the server, but no luck.
we have changed to PI server from http to https.
All Integration Directory objects(ICO, Channels, Business Systems, etc) are throwing errors as "Peer Certifcate rejected by chainVerifier.(More details mentioned in starting of this thread)
Can you please help?
Thanks in Advance.
Regards,
SV
Hi SV,
Certificate which is installed might be already expired or might be due to wrong deployment.
Restarting of the server will resolve this issue sometimes, i suggest you to try..
Please go through the below links
Peer certificate rejected by ChainVerifier - Technology Troubleshooting Guide - SCN Wiki
Regards
Bhargava Krishna
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
87 | |
23 | |
11 | |
9 | |
8 | |
5 | |
5 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.