Send HTTP request with SSL fails with a “No match found CA certificate” error.

Send HTTP request with SSL fails with a “No match found CA certificate” error.

book

Article ID: KB0090710

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks -
Not Applicable -

Description

Resolution:
Description:
============
Send HTTP request with SSL fails with a “No match found CA certificate” error.

Environment:
===========
All

Symptoms:
========

ssl_debug(1): Server sent a 2048 bit RSA certificate, chain has 4 elements.
validating certificate chain
looking in datastore for certificate with DN cn=Thawte SSL CA,o=Thawte, Inc.,c=US
match found
looking in datastore for certificate with DN cn=thawte Primary Root CA,ou=(c) 2006 thawte, Inc. - For authorized use only,ou=Certification Services Division,o=thawte, Inc.,c=US
No match found
CA certificate with issuer EMail=premium-server@thawte.com,cn=Thawte Premium Server CA,ou=Certification Services Division,o=Thawte Consulting cc,l=Cape Town,st=Western Cape,c=ZA and serial number 3365 5008 79AD 73E2 30B9 E01D 0D7F AC91 is not a trusted certificate
server verification failed:
com.tibco.security.AXSecurityException: CA certificate with issuer EMail=premium-server@thawte.com,cn=Thawte Premium Server CA,ou=Certification Services Division,o=Thawte Consulting cc,l=Cape Town,st=Western Cape,c=ZA and serial number 3365 5008 79AD 73E2 30B9 E01D 0D7F AC91 is not a trusted certificate
    at com.tibco.security.CertChainVerifier.validateAndCompleteChain(CertChainVerifier.java:235)
    at com.tibco.security.CertChainVerifier.validateAndCompleteChain(CertChainVerifier.java:78)
    at

Cause:
=====
The above trace indicates that the intermediate certificate corresponding to the DN information below was not found in the data store (the trusted certificate(s) folder) configured for this activity.
    
Resolution:
==========
Once the missing certificate is imported, the error should no longer be displayed and the configuration problem should be resolved.

Issue/Introduction

Send HTTP request with SSL fails with a “No match found CA certificate” error.