Peer certificate rejected

[PS23]

Hi All

This is an urgent test going on and appreciate the quick responses. We are doing rfc to soap synchronous scenario and getting the error "java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier "

checks done:

1.firewall allowed

2.certifcates installed correctly

3.channel uses soap receiver with http protocol and certificates details.

But client uses TLS ,we can see that in PI current version PI7.31 it uses ssl, can anyone suggest is the error due to this mismatch.

Have below doubts:

JAVA stack has to be active for TLS1.1?

Can this SSL instead of SSL lead to certificate rejection error?

If certificate is not installed in order , how to get it checked if it is in order or not. As we just received the certificate as an attachment by the govt client who itself is a issuing authority.

pls suggest .

Thanks

[former_member186851 · Accepted solution]

Hello SAP PI,

Did you check using XPI inspector?

[PS23 · Accepted solution]

HI

XPI inspector did help in fetching useful information.

Problem was solved after installing CA certificate along with p12 certificate in NWA.

Thanks everyone

[iaki_vila]

Hi SAP PI,

You have this note to enable TLS 1.0:   2092630 - Turning off SSLv3 on SAP NETWEAVER AS ABAP and AS JAVA, and on SAP HANA XS

I don't think PI can support in the same time SSLv3 and TLs. Check these:

Trying to make the SSLv3 and TLS protocols coexist | SCN

Managing the Credentials and Trusted Certificates to Use SSL - Network and Transport Layer Security...

Regards.