TIBCO - Server Certificate Rejected by Chain Verifier

xxxxxuser picture xxxxxuser · Aug 7, 2014 · Viewed 13.8k times · Source

We are getting this error

"BW-HTTP-100300 Job-29000 Error in [Processes/Services/HTTP Request/Process Definition.process/Send HTTP Request] An IOException was thrown while trying to execute the Http method caused by: java.io.IOException: Failed to create secure client socket: Server certificate rejected by ChainVerifier"

I have done the following: 1. Created send http request. 2. Configured everything in the Configuration tab and the Input tabs.  3. Created Identity and imported the same into Identity 4. Downloaded the certificate and imported it in to 'Configure SSL' 5. While running the process I get the error mentioned above. 

Am I missing anything?   Please provide me some guidance.  Thanks in advance

Answer

Nicolas Heitz picture Nicolas Heitz · Aug 7, 2014

Downloading the server certificate is not enough, you need to download the whole certificate chain from the root CA down to the server cert.

Certificate chain

In the above example, you need to download all certs (except the last one mail.google.com which is optional) and add them to your trusted certificates folder.