All geek questions in one place

Tibco's SOAB request over https - SSL certificate verification issue

I use Tibco BusinessWorks to use a soapy web service over an HTTPS connection.

The instructions are as follows:

  • Export certificates using a web browser.
  • Use Tools-> Trusted Certificates-> Import PEM format to a folder inside the project.
  • In the SSL Configuration tab of the Vehicle Details tab, specify the trusted certificates folder into which you imported them.

- OR -

Use the global variable BW_GLOBAL_TRUSTED_CA_STORE to point to an external folder (file: /// c: / tibco / certs) and place the certificates there in pem format.

I tried in both directions and still get the error below:

iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier

I tried to export them through firefox and IE. In different formats, including all keys and individually, the error still persists.

Is there something more specific I need to do, or is there a way to enable debugging for cert verifier? I tried to increase the debugging level for the designer, but I'm not sure if I am doing it right.

Any help would be wonderful.

Thanks a lot!

+3
source share
3 answers

The problem did not have the actual root certificate in the trusted certificate path.

This is easily solved by exporting certificates using OpenSSL:

openssl s_client -showcerts -connect <domain>:443

and copy all certificates from there.

+2
source

No need to save certificates in a BW project.

GV, BW_GLOBAL_TRUSTED_CA_STORE , , .

BW

+2

. .cert.

, ssl lib (.projlib) BW, Designer/BW , .

+1

Source: https://habr.com/ru/post/1711196/

More articles:


All Articles