Skip to Content

SSL Client sertificate

Hi friends. I have some problem. After import CA  sertificate  in client sertificate list  i have this error:

>> ---------- Begin of Secude-SSL Errorstack ---------- >>

ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (12851/0x3233) Verification of one certificate of path failed because the CA flag of its basic constraints is set to FALSE

ERROR in check_basicConstraints: (12851/0x3233) Verification of one certificate of path failed because the CA flag of its basic constraints is set to FALSE

ERROR in af_pse_get_PCAList: (4130/0x1022) Object PCAList doesn't exist

<< ---------- End of Secude-SSL Errorstack ----------

  SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

  No certificate request received from Server

<<- ERROR: SapSSLSessionStart(sssl_hdl=0x600000000073cb60)==SSSLERR_SSL_CONNECT

<<- SapSSLErrorName()==SSSLERR_SSL_CONNECT

Other sertificate from other server don't give an error

If I import this sertificate(which with error in tests) on other system , I don't see any problem.

I saw same error on forum , but solution is not work for me.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Mar 01, 2016 at 01:07 PM

    Hello,

    It is strange that the same certificate works on other systems, as it seems that the certificate is invalid / incorrect...

    CA flag of its basic constraints is set to FALSE

    But if it work on other systems... maybe it is something at the SAPCryptoLib? Have you tried to update it to the latest patch available?

    Regards,

    Isaías

    Add comment
    10|10000 characters needed characters exceeded