Question
ING Netherlands
IN
Last activity: 29 Mar 2017 0:27 EDT
How to get rid of “javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated” Exception for REST Service Invoke
We are trying to invoke the REST API resource path by POST method.
But using SOAP UI we were getting the error : “SSL handshake exception remote host closed connection during handshake” ; After some research, we have added “-Dsoapui.https.protocols=SSLv3,TLSv1.2” in VMOPTIONS file of SOAP UI bin directory which resolved the issue.
Now we are trying to invoke it by PEGA REST connector (using TOMCAT app server) but we are getting the same fatal exception : “javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated”.
Please help us to understand what change we need to do in TOMCAT server directory to include SSL or TLS versions or any other solution available.
Pegasystems Inc.
IN
Hi Bedant,
Can you refer below pdn link which describes about similar issue.
https://collaborate.pega.com/question/we-are-getting-following-error-while-invoking-rest
Pegasystems Inc.
US
Hello,
You can configure the SSL/TLS version in your REST connector rule as shown in the attachment as per your respective SSL/TLS version under which your service is available.
Along with the type of version if you are using the one-way SSL functionality then you need to create the Truststore as shown in Security settings in the attachment.
If you are using 2-way SSL functionality then you need to configure both Truststore and Keystore.
Note: The truststore/keystore certificates can also be installed at the server level, kindly check with your Server admin for this installation. Also you can search in PDN for the implementation of the specific SSL of REST connector for more help.
If you had done this configuration correctly then your issue might be resolved, else you can share the logs of server and Pega related for further investigation.
Regards
Mahesh
Pegasystems Inc.
US
Hello,
Adding to the above explanation you can find the sample arguments at Server level configuration of your Truststore and Keystore as follows,
-Djavax.net.ssl.keyStore=".../keystore.jks"
-Djavax.net.ssl.keyStorePassword="password"
-Djavax.net.ssl.keyStoreType= jks
-Djavax.net.ssl.trustStore="CA certificate"
-Djavax.net.ssl.trustStorePassword=certificate created password
-Djavax.net.ssl.trustStoreType=jks
Hope this might be helpful to you.
Regards
Mahesh