How to address TIBCO (Send HTTP Request) SSL Certificate Problems
Integrating a TIBCO service with a 3rd Party REST api utilizing the “Send HTTP Request” palette option and receiving the following error?..
iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier
at iaik.security.ssl.f.f(Unknown Source)
at iaik.security.ssl.f.d(Unknown Source)
at iaik.security.ssl.e.c(Unknown Source)
at iaik.security.ssl.SSLTransport.startHandshake(Unknown Source)
at iaik.security.ssl.SSLTransport.a(Unknown Source)
at iaik.security.ssl.SSLTransport.renegotiate(Unknown Source)
at iaik.security.ssl.SSLSocket.renegotiate(Unknown Source)
at com.tibco.security.ssl.super.O0OO.doHandshake(SSLClientImpl.java:322)
at ...
Normally I was able to use a browser to export each level of the certificate hierarchy to the BW_GLOBAL_TRUSTED_CA_STORE and have everything function fine. For some reason, the new integration didn’t present all required certification levels via the browser. I think the underlying reason may have been the use of a self signed certificate in the certificate chain.
Verify return code: 19 (self signed certificate in certificate chain)
To get around this, I was able to use the following openssl command to identify the required certs and manually copied and pasted each certification to a new file in the BW_GLOBAL_TRUSTED_CA_STORE. After that, running the service through designer worked just fine.
openssl s_client -showcerts -connect www.foobar.com:443





