When a TIBCO BusinessWorks (BW) process tries connecting to a Web Service, it returns the error, "iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier".
Article ID: KB0085367
Updated On:
| Products | Versions |
|---|---|
| TIBCO ActiveMatrix BusinessWorks | - |
| Not Applicable | - |
Description
Resolution:
Description:
=======
When a TIBCO BusinessWorks (BW) process tries connecting to a Web Service, it returns the error, "iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier".
Environment:
========
Operating System(s): All
TIBCO Product(s): TIBCO BusinessWorks
TIBCO Designer
TIBCO Administrator
Cause:
=====
When connecting to a Web Service the BW process(es) authenticates the web service server's certificate. As part of the authentication, all certificates from the server to the Certificate Authority (root cert) will need to be confirmed. Typically, this error happens when a certificate in the chain cannot be confirmed either because it is missing or is incorrect. Note that the same error can happen if a certificate is missing or incorrect on the the client side. For example, if the BW process(es) needs to connect to the web service server via a proxy server. It will also be required to have the proxy server certificate in it's trust store.
Resolution:
=======
Check that you have all the required certificates and that they are up to date. The certificates can be checked either by using third party applications, Internet Explorer or Portecle.
-Menu bar-> View-> Security Report-> View Certificates-> Certification Path
Instructions for Portecle
Refer to the third party application's website for further information on usage.
Description:
=======
When a TIBCO BusinessWorks (BW) process tries connecting to a Web Service, it returns the error, "iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier".
Environment:
========
Operating System(s): All
TIBCO Product(s): TIBCO BusinessWorks
TIBCO Designer
TIBCO Administrator
Cause:
=====
When connecting to a Web Service the BW process(es) authenticates the web service server's certificate. As part of the authentication, all certificates from the server to the Certificate Authority (root cert) will need to be confirmed. Typically, this error happens when a certificate in the chain cannot be confirmed either because it is missing or is incorrect. Note that the same error can happen if a certificate is missing or incorrect on the the client side. For example, if the BW process(es) needs to connect to the web service server via a proxy server. It will also be required to have the proxy server certificate in it's trust store.
Resolution:
=======
Check that you have all the required certificates and that they are up to date. The certificates can be checked either by using third party applications, Internet Explorer or Portecle.
Instructions for Internet Explorer 8
-Menu bar-> View-> Security Report-> View Certificates-> Certification Path
Instructions for Portecle
-Menu bar-> Examine-> Examine SSL/TLS connections-> <Web service address>
Refer to the third party application's website for further information on usage.
Issue/Introduction
When a TIBCO BusinessWorks (BW) process tries connecting to a Web Service, it returns the error, "iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier".
Feedback
Yes
No
Powered by
