Question
Orange Business Services - India
IN
Last activity: 9 Mar 2019 16:32 EST
SOAP Service Failed
Hello,
I have to make SSL connections in SOAP connector.For this I have user name and password and some certificates with me.
The certificates are installed on the server at location <java-home>/lib/security/cacerts
And on the pega side I created an authentication profile using username and password which is given to me.
After that when i try to test connectivity I got the following error "Caught unexpected Throwable during SOAP Connectivity Test: Could not connect to service"
Hello,
I have to make SSL connections in SOAP connector.For this I have user name and password and some certificates with me.
The certificates are installed on the server at location <java-home>/lib/security/cacerts
And on the pega side I created an authentication profile using username and password which is given to me.
After that when i try to test connectivity I got the following error "Caught unexpected Throwable during SOAP Connectivity Test: Could not connect to service"
Also when I traced the SOAP-Connector i got the error " Caught Throwable: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"
Could you please help me in knowing is there anything else to do from pega side or is it something related to server?
Thanks in advance
Pegasystems Inc.
IN
Hi,
Based on the exception provided, it is issue with certificate during the handshake.
Please check whether it is 2 way or 1 way handshake ? Accordingly, check whether correct certificate is installed or not and check from server side.
Cognizant
IN
Hi,
As you want to connect to https endpoint, it might be possible that you need to connect to different https (higher environments) URL's . So i suggest better create a jks data instance using the https url certificates and use the same in connect soap rule. that way without any dependency on server folder/jdk certificates, maintanancy can be easy as well.