Dear Friends,
We have one outbound scenario, where we are sending the file from SAP PI 7.0 to Webserver using SOAP protocol.
We have not configured any authentication . The only authentication is happenning is at SSL level.
When file goes out of the PI system , its failing with below error.
Error:
error “Error: Error: Delivery of the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Peer certificate rejected by ChainVerifier: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier.”.
Debug error message :
ssl_debug(514): Received v3 server_hello handshake message.
ssl_debug(514): Server selected SSL version 3.1.
ssl_debug(514): Server created new session F5:1D:00:00:D4:C4:7F:20...
ssl_debug(514): CipherSuite selected by server: TLS_RSA_WITH_AES_128_CBC_SHA
ssl_debug(514): CompressionMethod selected by server: NULL
ssl_debug(514): Received certificate handshake message with server certificate.
ssl_debug(514): Server sent a 2048 bit RSA certificate, chain has 2 elements.
ssl_debug(514): ChainVerifier: Error verifying certificate chain: java.security.cert.CertificateExpiredException
ssl_debug(514): Sending alert: Alert Fatal: bad certificate
ssl_debug(514): Shutting down SSL layer...
ssl_debug(514): SSLException while handshaking: Peer certificate rejected by ChainVerifier
The SOAP connetion was working file from last one year but suddenly ended with above error.
Scenario flow :
-------------------------
SAP PI 7.0[SOAP] ------> Webserver
So in this case , SAP PI will be client and webserver will be Server for SSL.
-----------------------------
My questions are
1. Where we do the SSL configurations in SAP PI for 7.0.
2.Does it mean that clint certificate which migth be present in TrastedCA has expired? (I am not able to find any expired one under TrstedCA eben though)
3.Does server changed its server SSL certificate and I have to import new clinet SSL?
4.The error says "Error verifying certificate chain: java.security.cert.CertificateExpiredException"...which certificate is expired here, How can I search where is that certificate?
5.Anybody has encounterd this error in past?
I have already gone throgh the below blogs/sites for reference, but not were fruitful.
1.Configuring HTTPs Connection in SAP PI 7.10 by Carlos Iván Prieto and Jon Andoni Suarez.
2.https://developer.mozilla.org/en-US/docs/Introduction_to_SSL#The_SSL_Handshake
Can you please help in this.,
Thanks in advance!!!
Regards
Venkatesh