"Received fatal alert: certificate_unknown" error while setting up HTTPS.
Article ID: KB0077652
Updated On:
| Products | Versions |
|---|---|
| Spotfire Server | 7.5 and higher |
Description
While setting up HTTPS, the following error can be seen in the server.log file.
=====
server.http.HttpCallable: Failed to send ServiceConfigCommand request to 'https://test.server.com:9443/spotfire/remote/message' : Received fatal alert: certificate_unknown org.springframework.web.client.ResourceAccessException: I/O error on POST request for https://test.server.com:9443/spotfire/remote/message": Received fatal alert: certificate_unknown; nested exception is javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
=====
The server would start up fine with no error in the catalina.log.
=====
server.http.HttpCallable: Failed to send ServiceConfigCommand request to 'https://test.server.com:9443/spotfire/remote/message' : Received fatal alert: certificate_unknown org.springframework.web.client.ResourceAccessException: I/O error on POST request for https://test.server.com:9443/spotfire/remote/message": Received fatal alert: certificate_unknown; nested exception is javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
=====
The server would start up fine with no error in the catalina.log.
Issue/Introduction
"Received fatal alert: certificate_unknown" error while setting up HTTPS.
Resolution
The above issue can be seen if the "certificateVerification" field in the "server.xml" file is set to "required", with the X.509 client certificate authentication disabled. If X.509 client certificate authentication is not enabled, the "certificateVerification" field must be set to "none" and the "truststoreFile", "truststorePass", and "truststoreType" parameters must be removed in the "server.xml" file.
Feedback
Yes
No
Powered by
