webMethods调用HTTPS报错:iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier

1.报错信息

在使用pub.client:http方法调用客户的HTTPS的URL时,监控的Mail报错:
推送质押结果到****接口有报错,报错信息如下,请关注。
异常信息:iaik.security.ssl.SSLException: Server certificate rejected by ChainVerifier


2.原因分析

检查发现这个客户的SSL Certificate没有导入进Truststore


3.处理方法

访问客户的HTTPS时,webMethods IS平台Security > Keystore中要将客户的证书导入到Truststore中。
在pub.client:http也可以加入下面的方法pub.security.keystore:setKeyAndChain。
WebMethods 的帮助文档有pub.client:http解释补充:
If url begins with  https: , you can use pub.security:setKeyAndChain to specify the certificate
chain. If you do not specify a certificate chain, pub.client:http uses the default outbound SSL
certificate settings to authenticate the resources.
pub.security:setKeyAndChain已经Deprecated了,Replaced by pub.security.keystore:setKeyAndChain.


4.补充备注

出现Server certificate rejected by ChainVerifier的原因还有可能:
(1)、证书内容导入不正确 
the client cert just is one-level cert,there are not CA root and intermediate certs
(2)、证书信息不对
the cert is not a valid server cert somehow,double check you truststore, you have the right cert there

猜你喜欢

转载自blog.csdn.net/xufengzhu/article/details/54908802
今日推荐