topic Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system in Application Development and Automation Discussions

SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

bobi04 — Wed, 06 Dec 2023 14:14:22 GMT

Hello,

I'm trying to connect to a URL in the same server, ( BSP applic. ) but when I try to connect to this URL I get the next error.

SSL handshake with xxxxxx.it-dc.net:8081 failed: SSSLERR_PEER_CERT_UNTRUSTED (-102)#Peer's X.509 certificate (chain) validation failed (missing trust?)##SapSSLSessionStartNB()==SSSLERR_PEER_CERT_UNT

I tried to look in STRUST transaction but there is the certificate and it doesn't look like there is any error within,

Can somebody help?

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

abo — Wed, 06 Dec 2023 14:24:57 GMT

Did you look at the whole chain from the root CA downwards or just the final node?

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

bobi04 — Wed, 06 Dec 2023 14:34:28 GMT

c5e08e0478aa4727abc4482f5be390b2 when I go to STRUST, I see the certificate, I don't see any chain or anything related to that

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

Ulrich_Schmidt1 — Wed, 06 Dec 2023 14:38:17 GMT

The CA root certificate of the "peer's" certificate needs to be imported into the "Certificate List" in STRUST, most probably in the "SSL client Standard" section or the currently used "SSL client xyz" section.

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

bobi04 — Wed, 06 Dec 2023 14:43:57 GMT

I have it there.

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

Ulrich_Schmidt1 — Wed, 06 Dec 2023 15:08:37 GMT

No, you don't...: "Certificate List" is empty!

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

abo — Wed, 06 Dec 2023 15:24:18 GMT

the chain is visible as such only in a browser, the STRUST interface will show them as separate certificates

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

bobi04 — Wed, 06 Dec 2023 15:32:42 GMT

I think that this one is the correct, there are a certificate List.

This is the log of the error.

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

Ulrich_Schmidt1 — Wed, 06 Dec 2023 15:40:08 GMT

That one is the list for the server, but your problem is in the client. Your client does not trust the certificate of the server, therefore you need to import your server's CA root into the trust list of the client.

Re: SSSLERR_PEER_CERT_UNTRUSTED Trying to connect to the same system

syedkamran — Wed, 06 Dec 2023 16:57:12 GMT

You can check the dev_icm log for exact certificate name which is causing the problem and import the same required certificate in correct PSE file.