cancel
Showing results for 
Search instead for 
Did you mean: 

HTTPS(SSL) - PI AEX - Destinations , ID objects throwing errors and Component not VISIBLE in component monitoring

Former Member
0 Kudos

Hi PI Experts,

Please help and provide your valuable inputs so that below issue is sorted.

Summary,

Basis team have installed HTTPS(SSL) and disabled HTTP in PI DEV system 7.4 AEX.

https://PIHost:443/

As PI consultant I have done below changes:

XPI Service: All config Service - all https port to 443 and secure connection to messaging,all

XPI Service: CPACache Service SLD https port to 443

HTTPS PI host is opening correctly in Internet Explorer.

I am getting below errors:

1.Destinations (SLD_Client and SLD_DATASUPPLIER) throwing following error: Error while silently connecting: org.w3c.protocol.http.HTTPException: Peer Certificate rejected by chainVerifier.( I have configured the keystore mentioned in Configuration - Security - SSL in NWA)

2.ID objects not opening and throwing same error: https://PIhostname:443/rep/query/int?container=any!details:caught exception message: peer certificate rejected by Chain Verifier

3. Error while doing component monitor and PI components(Central Adapter Engine, Mapping runtime, ID and ESR ) not VISIBLE.

Let me know if other info is required for your inputs.

thanks in advance.

Regards,

SV

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Hi,

Make sure that you have loaded there CA into your Cert Storage on NWA with the Entire chain that is provided by them or you can get the chain from internet explorer by copying that endpoint into internet explorer.

Also make sure that they have your cert. After implementing the certs restart PI system.

It sounds you are running on a single stack. Make sure that you logging is turned on on ICO.

Regards,

Jannus Botha

Former Member
0 Kudos

Thanks Jannus,

We are rechecking the points mentioned in your comments and will update the thread.

Regards,

SV

Former Member
0 Kudos

Hi Jannus,

We have checked all the points mentioned by you in the thread.

Issue is not sorted.

Can you please let me know if something else is causing this issue?

Also please let me know how to turn on the logging on ICO?

Regards,

SV

Former Member
0 Kudos

Hi SV,

Have you tried restarting the PI system? Because after installation you need to restart the java stack?

Because if the certs are correct it must work. Are you only having a problem with this one interface?

Regards,

Jannus Botha

Former Member
0 Kudos

Hi Jannus,

We have tried restarting the server, but no luck.

we have changed to PI server from http to https.

All Integration Directory objects(ICO, Channels, Business Systems, etc) are throwing errors as "Peer Certifcate rejected by chainVerifier.(More details mentioned in starting of this thread)

Can you please help?

Thanks in Advance.

Regards,

SV

Former Member
0 Kudos

Hi Jannus,

Any clues please?

Your help is really appreciated.

Thanks.

Regards,

SV

Bhargavakrishna
Active Contributor
0 Kudos

Hi SV,

Certificate which is installed might be already expired or might be due to wrong deployment.


Restarting of the server will resolve this issue sometimes, i suggest you to try..

Please go through the below links

Peer certificate rejected by ChainVerifier - Technology Troubleshooting Guide - SCN Wiki

Regards

Bhargava Krishna

Former Member
0 Kudos

Thanks Bhargava,

We have restarted the server and also done the configuration as in link shared.

But Issue is not getting resolved.

Any clues , what else could be causing this issue?

Regards,

SV