webMethods

 View Only
Expand all | Collapse all

webMethods Integration Server cannot import client certificate

  • 1.  webMethods Integration Server cannot import client certificate

    Posted Mon August 05, 2024 04:47 AM

    Product/components used and version/fix level:

    webMethods Integration Server 10.15.0.0 IS_10.15_SPM_Fix1 IS_10.15_Core_Fix9

    Detailed explanation of the problem:

    In administration console under Security → Certificates → Configure Client Certificates

    I try to import a certificate for SSL Client Authentication and get the error

    Error messages / full error message screenshot / log file:

    Could not import certificate: iaik.asn1.CodingException: ASN.1 creation error:Length: Too large ASN.1 object: 58

    What can be the issue here?


    #Integration-Server-and-ESB
    #SSL-Client-Certificate
    #webMethods


  • 2.  RE: webMethods Integration Server cannot import client certificate

    Posted Mon August 05, 2024 05:16 AM

    Hi Klaus,

    can you try to check the certificate outside of the IS with OpenSSL or any other certificate management tool and check its properties?
    Eventually, the private key for which the certificate was issued is to long.

    Regards,
    Holger


    #SSL-Client-Certificate
    #webMethods
    #Integration-Server-and-ESB


  • 3.  RE: webMethods Integration Server cannot import client certificate

    Posted Mon August 05, 2024 06:13 AM

    Hi Holger,

    Thank you for your response.

    Regards,
    Klaus


    #SSL-Client-Certificate
    #Integration-Server-and-ESB
    #webMethods


  • 4.  RE: webMethods Integration Server cannot import client certificate

    Posted Mon August 05, 2024 07:51 AM

    Hi Klaus,

    another hint from the net is to check for the serialNumber of the certificate as this might get longer than expected.
    Remember, that the certificates will be stored in the ISInternal database schema and the column for the serialNumber has a limited length.
    Check for the table IS_USER_CERTIFICATES.

    Regards,
    Holger


    #SSL-Client-Certificate
    #Integration-Server-and-ESB
    #webMethods