File adapter fails to connect to EMS using SSL certificates from an external directory outside the project.

File adapter fails to connect to EMS using SSL certificates from an external directory outside the project.

book

Article ID: KB0086119

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks Plug-in for Files for Unix and Windows -
Not Applicable -

Description

Description:
The File adapter could not connect to the EMS server due to an "unknown ca"error.

“2010-06-04 11:23:59 1968: error: 14090086: SSL routines: SSL3_GET_SERVER_CERTIFICATE: certificates verify failed:.\ssl\s3_clnt.c:983:".
Symptoms:
Symptoms:
========
File adapter throwing “validation error” and “Startup error. SDK Error: JMS Error: Failed to connect on ssl: //localhost:7243, ssl: //localhost:17243: Server not connected”.
Cause:

Attempting to use an EMS SSL connection without importing a certificate in a Designer project, File Adapter fails to connect to an EMS server. 

Issue/Introduction

File adapter fails to connect to EMS using SSL certificates from an external directory outside the project.

Resolution


1). Insert the property ‘java.property.EnableExternalCertificatesFeature true’ in the designer.tra file.
 
2). Copy the sample EMS Certificate into directory “C:\tibco\ems\5.0\bin\certs\ext_txt\ server_root.cert.pem”.

3). Start the EMS Server: C:\tibco\ems\5.0\bin>tibemsd -config tibemsdssl.conf.

4). Open a sample project and create a global variable, ‘RuntimeCertificatesDirectory’, pointing to the server trusted certificate (till ext_txt folder from step 2).

5). Create an Identity Resource pointing to the EMS sample client identity file and password using global variables.

6). Configure DefaultJMSTopicSession and DefaultJMSQueueSession with ‘Configure SSL Button’ that prompted for Trusted Certificate Folder and Identity file.

Note, GV from step 2 was given for a trusted certificate folder and the Identity resource was from step 5 was provided.