WebSphere Application Server & Liberty

WebSphere Application Server & Liberty

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Certificate chaining erro

    Posted 03/09/17 12:57 AM

    I am running WAS 7.0 and my application server is using cacerts for its trust store. We have an app trying to connect to another webservice over https and failing with the certificate chaining error. All the certificates primary intermediate root have been added to the truststore. I enalbed SSL trace and I see the following failure at the end, Any ideas ?

     

    Thanks in Advance !

     

    3/8/17 23:24:07:713 CST] 000000d4 SystemOut O %% Invalidated: [Session-6, SSL_RSA_WITH_AES_128_CBC_SHA]
    [3/8/17 23:24:07:713 CST] 000000d4 SystemOut O WebContainer : 2, SEND TLSv1 ALERT: fatal, description = certificate_unknown
    [3/8/17 23:24:07:713 CST] 000000d4 SystemOut O WebContainer : 2, WRITE: TLSv1 Alert, length = 2
    [3/8/17 23:24:07:713 CST] 000000d4 SystemOut O WebContainer : 2, called closeSocket()
    [3/8/17 23:24:07:714 CST] 000000d4 SystemOut O WebContainer : 2, handling exception: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.n: Certificate chaining error



  • 2.  RE: Certificate chaining erro

    Posted 03/21/17 03:49 PM

    The issue was on the server side, it was sending the wrong chain. This was resolved by instaling certs in the proper order on the server side.

     

    Hope it will help someone.



Related Content