Question
ING Belgium SA NV
BE
Last activity: 19 Apr 2018 6:00 EDT
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
Issue background : we are facing issue with existing Rest connector which was working fine earlier. All of sudden, connector is not able to access the external application URL.
We checked with external application if they do any changes on their side. Unfortunately, there is no change from external application team,WAS/INFRA team and network team as well.
2.getting the error when service hit occured "javax.net.ssl.SSLPeerUnverifiedException"
Accepted Solution
Pegasystems Inc.
IN
Hello Nagaraj,
What’s the Pega version you are using .
Do you have enabled DSS https/allowAllHostnames .
If yes try to disable it and run your use case .
If that’s not working enable following jvm argument -Djavax.net.debug=all and provide us the server logs.
Thanks,
Arun
Pegasystems Inc.
IN
Hi,
Could you please verify invoking the External-Service from Rest client using the certificate added in trust store if it gives error then there is a chance to check the certificate whether it is valid or not or expired. if it is working fine then raise a SR and submit to GCS.
JPMorgan Chase & Company
US
Hi,
Please refer below pdn article.
Ernst & Young
LU
Hi Sudhakar,
Recently we had oracle migration to 12c. we suspect the TLS version is not updated. We updated it and its not working
Accepted Solution
Pegasystems Inc.
IN
Hello Nagaraj,
What’s the Pega version you are using .
Do you have enabled DSS https/allowAllHostnames .
If yes try to disable it and run your use case .
If that’s not working enable following jvm argument -Djavax.net.debug=all and provide us the server logs.
Thanks,
Arun
ING Belgium SA NV
BE
getting below exception while trying to invoke the one of Rest services
exception: javax.net.ssl.SSLException: hostname in certificate didn't match: !=
Issue background : Rest service is been accessed earlier without any truststore\keystore. Now there was change from infra side(security reasons) because of which we will have to configured new truststore and keystore.
We tried creating jks file for the same and tried configuring truststore and then keystore(trial & error) .
Kindly advise what should be configured in trust store and keystore? what is the things we are missing here?
Please note that we did DSS settings https/allowAllHostnames as false.
Pegasystems Inc.
IN
Hello Nagaraj,
Could you please add below JVM argument and provide us the server logs to have a look .
-Djavax.net.debug=SSL .
Thanks,
Arun