cancel
Showing results for 
Search instead for 
Did you mean: 

Error PI 7.31 RFC-SOAP Certificate Rejected

0 Kudos

Hi Experts,

I'm facing an error last days.

The scenario is, an interface was working fine in DEV, but in QAS stopped.

DEV and QAS has the same configuration, same endpoint, user, etc....

In QAS the error in PI 7.31 was:

com.sap.engine.interfaces.messaging.api.exception.MessagingException: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier


So, I saw the certificate and it was expired. The server updated the certified.

And now DEV and QAS stopped working, and both return the message above in PI.


The certificate is a auto-signed, and according to the documentation there was no certificate installation in development.


The communication is an RFC to SOAP synchronous.

Using Proxy, and authentication.

The communication channel was not changed, and they don't have certificate authentication.


I requested de basis team to install the certificate in NWA, but the view does not appeard in the configuration in PI.


So... any idea what's my problem?


Thanks.

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi Antonio,

Please have a look at the link below.

Let me know if you need any additional information.

http://scn.sap.com/message/14813962#14813962

Regards,

Jannus Botha

0 Kudos

Hi Jannus,

Tks for the link, the problem is that I didn't configured in TrustedCA. I created a new entry for the certificate.

After configuring in TrustedCA It's work fine.

Former Member
0 Kudos


Hi Antonio,

Excellent news. Good luck.

Regards,

Jannus Botha

Answers (3)

Answers (3)

0 Kudos

Hi,

Thanks all for the answers.

I already requested the installation of certificate, but they don't appear in configuration of channel communication on PI:

the certificate installed:

Any Ideia?

former_member184720
Active Contributor
0 Kudos

I see that you are selecting the " Default" key store view in the communication channel where as it is imported it under "CTE_NEOGRID_SA" view

So please change key store view and see if you can find?

0 Kudos

Hi Hareesh,

I already tried this, and nothing has changed.

I tried with 'CTE_NEOGRID_SA' and space... but the certified insist in not appear...

tks.

Eoin_Kierans
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hello,

After importing the certificate to NWA under Certificates and Keys please ensure you restart the channels. This is because the certificates are cached, therefore even after updating the cert in the keystore it may still use the old cert until the channel is restarted.

Regards

Eoin

former_member181985
Active Contributor
0 Kudos

Hi Antonio,

Please deploy the latest certificate in PI using NWA under Certificate and Keys.


check this: http://scn.sap.com/message/11074837

Regards,

Praveen Gujjeti