SSLException: Peer sent alert: Alert Fatal: handshake failure when using REST Polling

[infra_team]

Hi All,

We are reconfiguring one of our sender channels from JDBC to REST and we are trying to use REST Polling as the message Protocol. Upon start testing in Postman there is option where we can disable the SSL verification and we are able to test the URL and Basic Auth without any SSL issue. However, in PI when we tried to start the channel, we are still getting the SSL exception error. Please see below snip.

We already checked the TSL versions/cipher suites, and it was matched with the source system.

Has anyone have experience on this? what is your resolution?

Any information is appreciated.

Thanks!

[infra_team]

Hi All,

Thanks for your inputs!

This issue is now resolved, the resolution is this note 2616423 - SSL does not work between PI and Remote System - SSLException: Peer sent alert: Alert Fata...

[JaySchwendemann]

I would suggest using XPI Inspectors Example 11, see also here for details: https://blogs.sap.com/2015/12/10/using-xpi-inspector-to-troubleshoot-http-ssl-connections/

[sunny_kapoor]

Hi infra.team

The error simply means that your client i.e. PI system does not have the server root certificateYou need to download it and upload it in the STRUST of your PI system.Regards,Sunny

[JaySchwendemann]

There's no such thing as STRUST in a (supported) PI / PO system. You wanna use key-storage (/nwa/key-storage). Also importing the root CAs certificate is not always adviseable. While I would not encourage anybody to do active certificate pinning with an external source, it might be a policy of the company to do so (read: import the server certificate instead of the root ca's certificate)