SFSF adapter error: Peer certificate rejected by ChainVerifier

We are trying to connect to Success factors system.The certificates have been imported image.png

Own certificate appears as a wild card which I am not too sure about however we copied the certificate with a specific name. The certificates have been stored in Trusted key store in sequence Own->Intm->Root.

We have chosen “Specify SSL server certificate” option in the SFSF communication channel and since the own certificate does not appear in the comm channel, I typed in the entry from the keystore name. The URL is correct. On ping, it gives an error “iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier”

XPI inspector shows the logs:

Private Key View/Entry: TrustedCAs/hcm17own ERROR: NOT A KEY-PAIR Exception occurred: Unable to recover the key: java.security.KeyStoreException: Not a certificate entry at com.sap.engine.services.keystore.impl.KeyStoreEntry.getKey(KeyStoreEntry.java:222) at com.sap.xi.tools.inspector.checks.SignatureCheck.checkEntry(SignatureCheck.java:792) at com.sap.xi.tools.inspector.checks.SignatureCheck.checkPrivateKey(SignatureCheck.java:753) at com.sap.xi.tools.inspector.checks.SSLClientCheck.checkIt(SSLClientCheck.java:138) at com.sap.xi.tools.inspector.checks.SSLClientCheck.checkChannel(SSLClientCheck.java:95) at com.sap.xi.tools.inspector.checks.Check.check(Check.java:68) at com.sap.xi.tools.inspector.output.XIChannelInfo.getHTML(XIChannelInfo.java:96) at com.sap.xi.tools.inspector.output.Output.write(Output.java:36) at com.sap.xi.tools.inspector.output.Output.write(Output.java:31) at com.sap.xi.tools.inspector.output.XIChannelInfo.write(XIChannelInfo.java:45) at com.sap.xi.tools.inspector.XIInspector.stop(XIInspector.java:401) at com.sap.xi.tools.inspector.Scheduler.stop(Scheduler.java:137) at com.sap.xi.tools.inspector.XIInspector.end(XIInspector.java:285) at JEE_jsp_result_1486674452218._jspService(JEE_jsp_result_1486674452218.java:83) at com.sap.engine.services.servlets_jsp.lib.jspruntime.JspBase.service(JspBase.java:102) at com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Invokable.java:152) at com.sap.engine.services.servlets_jsp.server.Invokable.invoke(Invokable.java:38) at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:466) at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:210) at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:441) at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:430) at com.sap.engine.services.servlets_jsp.filters.DSRWebContainerFilter.process(DSRWebContainerFilter.java:38) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.servlets_jsp.filters.ServletSelector.process(ServletSelector.java:81) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.servlets_jsp.filters.ApplicationSelector.process(ApplicationSelector.java:278) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.WebContainerInvoker.process(WebContainerInvoker.java:81) at com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.ResponseLogWriter.process(ResponseLogWriter.java:60) at com.sap.engine.services.httpserver.chain.HostFilter.process(HostFilter.java:9) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.DefineHostFilter.process(DefineHostFilter.java:27) at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.MonitoringFilter.process(MonitoringFilter.java:29) at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.SessionSizeFilter.process(SessionSizeFilter.java:26) at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.MemoryStatisticFilter.process(MemoryStatisticFilter.java:57) at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.filters.DSRHttpFilter.process(DSRHttpFilter.java:43) at com.sap.engine.services.httpserver.chain.ServerFilter.process(ServerFilter.java:12) at com.sap.engine.services.httpserver.chain.AbstractChain.process(AbstractChain.java:78) at com.sap.engine.services.httpserver.server.Processor.chainedRequest(Processor.java:475) at com.sap.engine.services.httpserver.server.Processor$FCAProcessorThread.process(Processor.java:269) at com.sap.engine.services.httpserver.server.rcm.RequestProcessorThread.run(RequestProcessorThread.java:56) at com.sap.engine.core.thread.execution.Executable.run(Executable.java:122) at com.sap.engine.core.thread.execution.Executable.run(Executable.java:101) at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)

Please suggest if someone has seen this error and how to resolve this.

image.png (19.5 kB)

We are trying to connect to Success factors system.The certificates have been imported image.png Own certificate appears as a wild card which I am not too sure about however we copied the certificate with a specific name. The certificates have been stored in Trusted key store in sequence Own->Intm->Root. We have chosen "Specify SSL server certificate" option in the SFSF communication channel and since the own certificate does not appear in the comm channel, I typed in the entry from the keystore name. The URL is correct. On ping, it gives an error "iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier" XPI…

SFSF adapter error: Peer certificate rejected by ChainVerifier

Very Helpfull

User Rating: Be the first one !
Reviewer Asked on May 25, 2017 in SAP PORTAL.
Add Comment
0 Answer(s)

Your Answer

By posting your answer, you agree to the privacy policy and terms of service.