Ceritificate rejected by chainverifier - issue with SSL config (Ciphers)

[former_member586610]

Dear Expert,

Starting this week, few interfaces weren't working in my production environment. The target group to which these interfaces communicate says, they removed from weak ciphers from their configuration last week. I guess this could be the issue, as certificate used is still valid.

Please advise on how to check what ciphers I have on my PI system. Can this only be done on PI server using Putty or so?. Possible to check somewhere in NWA?.

Thank you in advance.

Error:

Error occurred while connecting the FTP server "xxx.yyy:21": iaik.security.ssl.SSLCertificateException: Peer certificate rejected by Chainverifier

Regards,

Kumaran

[praveen_sutra]

Hi Guna,

Which PI version are you working ??

as per my understanding it might be because of the removing weak ciphers.

In that case you can also strengthen your cipher suites.

PFB the links that can be useful to answer your query.

Hardening SSL/TLS Configuration by Usage of Sec... | SCN

hope this helps,

thanks and regards,

Praveen T

[ravi_reddy1]

Hi Kumaran,

i think  certificates are expired.. please ask the basis team for your confirmation

Regards

Ravi

[former_member586610]

Hi Ravi,

Thanks for your reply. I got it checked, certificate is valid.

Regards,

Kumaran