API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  SSL Library Error

    Posted Mon August 14, 2023 05:31 AM

    HI Team,

    I have configured a TLS Profile in API Connect v5 for the backend i am calling in API Manager. But i am getting below error in Datapower logs 

    SSL Library error: error: 14090086 : SSL Routines:ssl3_get_server_certificate: certificate verify failed.

    Can somebody help me with this error



    ------------------------------
    Fahad Hassan
    ------------------------------


  • 2.  RE: SSL Library Error

    Posted Mon August 14, 2023 09:56 AM
    APIC v5 is not supported. Has been replaced. I suspect you knew that.
     
    What flow does the TLS Profile support? Is it a Client or Server profile? I suspect you intended to assign a TLS Server Profile to an API Gateway SNI to support the invocation of an API you published to the API Gateway. Please check the TLS definitions -- Keystore & Truststore. 
     
    However, you might be doing something else. Your statement "backend i am calling in API Manager" -- is that correct? Are you calling an API in the API Manager? If you are, the above paragraph does not apply. I recommend you use the "apic toolkit" CLI. 


    ------------------------------
    Ravi Ramnarayan
    Technical Account Manager - Expertise Connect
    IBM
    ------------------------------

    Original Message


  • 3.  RE: SSL Library Error

    Posted Tue August 15, 2023 02:52 AM

    HI @Ravi Ramnarayan,

    Thanks for the reply. Yes i know and we are in process of migrating to v10. Actually i created one TLS profile in api manager v5 and i used that profile in invoke in Assembly. and i am facing this error

    BR
    Fahad



    ------------------------------
    Fahad Hassan
    ------------------------------

    Original Message


  • 4.  RE: SSL Library Error

    Posted Tue August 15, 2023 04:23 AM

    Hi, from outside of APIC/DataPower-Gateway (so Postman or cURL perhaps) can you successfully call the backend with the certificates you used to create the TLS Profile?



    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Hybrid Cloud Integration Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------

    Original Message


  • 5.  RE: SSL Library Error

    Posted Tue August 15, 2023 05:17 AM

    HI @Nick Cawood,

    Thanks for the reply. I am facing this issue only in v5 . I have tested this in our apic v10 test env and its working fine there

    BR
    Fahad



    ------------------------------
    Fahad Hassan
    ------------------------------

    Original Message