ERROR :IAIK REJECTED BY CERTICATE

Hi,
secnario rfc>soap(Digitally sign and encrypt)
error: IAIK REJECTED BY CERTICATE
we are trying to test signing and encryption using soap1.1 in pi7.11 system
we created test interface ,we checked mapping it is ok
i created private certificate and generated CA using service.sap.com/tcs and copied and pasted the response to same txt file which pem and renamed it as crt
now,i loaded the crt file to default Q in NWA as x.509 certificate
I have selected only sign option in reciver agreement ,activated and tested with triggering rfc ,error iaik peer certificate rejected
Tried all possible ways:
1)tried with custom view and default view/no go
2)tried by putting the x509 certificate in trusted CA,as it is a test certificate generated from service,sap.com/tcs,no orginal CA
3)Restarted java engine,icm,checked all settings like rfc etc
4)Followed all the instructions by forums,blogs,wikis
Need step by step advise and help,by an sr Expert in Forum

Hi All,
We are having same issue with the FTPS in our SAP PI systems. On the Target FTP server side we are using the Proftpd software for the FTPS installed and configuration on port 990 and generated Certificate on FTP Server using Proftpd software.
In SAP PI server Communication Channel Configuration we use below FTP configuration.
FTP Connection Parameters.
Server : xxxxx
Port :990
Data Connection : Passive
Connection Security : FTPS (FTP Using SSL/TLS) for Control Connection
Command Order : AUTH TLS,USER,PASS,PBSZ,PROT
We are not using any [ ] X.509 Certificate for Clinet Authentication
The above Parameter settings for FTPS working fine without any issues, CC Polling process successfully finishing for every 60 seconds as defined.
ISSUE
When we change the Connection Security : FTPS(FTP Using SSL/TLS) for Control and Data connection
and start the CC its geting errors "........ Certificate rejected by Chain Verifier".
We tried with couple of options on the Proftpd FTP client configuration file
with TLSRequired <on> <auth+data> but getting same error, but its working fine with the option
TLSRequired ctrl.
Please let us know your suggestions whether we can continue withe the Control Connection option or any solution if we use Control and Data Connection.
Thanks in advance
Gary.

Similar Messages

Session management error: Authentication Rejected error

Please help me with this error I get when trying to build qdvdauthor:
/opt/qt/bin/uic qplayer/engines/dialogqxinesetup.ui -o .ui/dialogqxinesetup.h
Session management error: Authentication Rejected, reason : None of the authentication protocols specified are supported and host-based authentication failed
the xhost + command does not help and ...
the command: xhost +localhost gives me the following message:
xhost: bad hostname "localhost"
Thank you

br4 wrote:
no
in /etc/rc.conf
# NETWORKING
HOSTNAME="myhost"
and /etc/hosts is 127.0.0.1
i use dhcp . so should i change the /etc/rc.conf ?
At least something worked! FYI, I use dhcp as well and here are the relevant parts of my /etc/rc.conf
# NETWORKING
HOSTNAME="darkstar"
and /etc/hosts
#<ip-address> <hostname.domain.org> <hostname>
127.0.0.1 localhost.localdomain localhost darkstar

Error:iaik.security.ssl.SSLCertificateException: Peer certificate rejected

Hi,
I am getting error com.sap.engine.interfaces.messaging.api.exception.MessagingException:
iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
When i test for digital signing and encryption using soap receiver CC
we passed all the values for soap CC
Created key store view and in that view I have generated private certificate and generated CSR using SAP CA(test ssl for 8 weeks) for the private key and also imported public key for encryption given by reciver
When i test i get the error message
I check certificates validity dates
I restarted java engine and ICM
I added the public key in trusted CA in NWA
I re created the view and added the certifcates
still the same error
how and where to check to check IAIK in NWA and how to deploy it in java engine using NWA, we are using PI7.11 (no VA)
any suggestions?

Hi,
The main causes for this kind of problem are:
1. The correct server certificate could not be present in the TrustedCA keystore view of NWA. Please ensure you have done all the steps described in the URL below:
Security Configuration at Message Level
http://help.sap.com/saphelp_nwpi71/helpdata/EN/ea/c91141e109ef6fe1000000
0a1550b0/frameset.htm
2. The server certificate chain contains expired certificate. Check for it and if it's the case renew it or extend the validation.
3. The certificate chain was not in correct order. Basically the server certificate chain should be in order
Own->Intermedite->Root. To explain in detail, if your server certificate is A which is issued by an intermediate CA B and then B's certificate is issued by the C which is the root CA (having a self signed certificate).
Then your certificate chain contains 3 elements A->B->C. So you need to have the right order of certificate in the chain. If the order is B first followed by A followed by C, then the IAIK library used by PI cannot verify the server as trusted. Generate the certificate in the right order and then import this certificate in the TrustedCA keystore view and try again.
4. If the end point of the SOAP Call(Server) is configured to accept a client certificate(mandatory), then make sure that it is configured correctly in the SOAP channel and it is also within validity period.
(This certificate is the one which is sent to Server for Client authentication)
As a resource, you may need to create a new SSL Server key.
The requirement from SAP SSL client side is that the requested site has to have certificate with CN equal to the requested site. I mean if I request URL X then the CN must be CN=X.
In other words, the CN of the certificate has to be equal to the URL in the ftp request. This can be the IP address or the full name of the host.
Request the url with the IP of the SSL Server and the certificate to be with CN = IP of the server.
In any other case the SSL communication will not work.
Regards,
Caio Cagnani

** SOAP - Receiver CC - Sync - Error - certificate rejected by ChainVerifie

Hi Friends,
In our interface BPM - SOAP call (Sync), in the receiver SOAP CC, we are getting the below error.
SOAP: call failed: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
In the SOAP CC, we use HTTP protocol. In the target URL, it starts with https://...... and soapAction is mentioned.
Previously, this channel was working fine. No issues.
For testing, I copied and pasted the target URL in Internet Explorere, it did not ask any certificate, I am able to execute the wsdl. i.e call the soapAction - sent the request and got the response.
Friends, could you tell me why the above error is coming now ?
Kind regards,
Jegathees P.

Hi,
https service is running?
Check: SMICM -> Services
Also check with the named SAP note inside.
Cheers,
André
Edited by: André Schillack on Apr 28, 2010 5:37 PM

File Adapter FTPS: Error - iaik.security.ssl.SSLException

I'm trying to use FTPS to communicate from XI ( SP 15 ) . FTPS system Admin provided CA Certificate and we installed same in key Storage as trusted CAs.
However when I try to send file It was throwing message " Error: Message processing failed: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: illegal parameter " In the Adapter Monitoring .
However same Certificates installed on recent versions of XI ( PI 7.0) works just fine.
Any ideas will be appreciated.

Hi S T,
Check these..
Details for 'Is Web service security available?'
HTTPS Error
All the best!
cheers,
Prashanth
P.S Please mark helpful answers

When trying to send email, I get error message, rejected by server

Our companies webhosting and email are through Bluehost. I have set up email on my iPhone and it receives email just fine, but when i try to send I get "recipient rejected by server" error. How can I fix this. i have tried everything i know to do.

most of the time the problem is the settings of the out going server of your email account. Call your internet provideer and ask them for the right settings, or do a research on google for those

Cannot sent mail:error-address rejected by the server

hi,i'm using iphone 4 ios 6.1.3
i'm able to receive mail but not able to send mail through my iphone
it displays the error- a copy was saved to outbox and cannot send mail as it was rejected by the server.
i went through many forums but it didn't help.
i rechecked my settings which are as follows
use SSL-ON
primary server-stmp.gmail.com
authetication-PASSWORD
SERVER PORT-TRIED BOTH 465 AND 587
please help if you consider the settings to be wrong or find any appropriate solution.thanks!

Hello, mannatarora.
Thank you for the question. The easiest way to troubleshoot this issue would be to delete the account and add it back to the iOS device. Below, I have included two e-mail troubleshooting articles.
iOS: Unable to send or receive email
http://support.apple.com/kb/TS3899
iOS: Gmail account will not connect to Gmail server
http://support.apple.com/kb/TS3058
Hope this helps,
Jason H.

Application "Leave request" getting error after rejection from manager

Hi folks,
we getting an error in the ESS leave request application with using the workflow (WS12300111).
We have EP7 SP11 wit ESS/MSS 600 SP7 (for ERP2005) . All ESS/MSS services/webdynpros are deployed without errors.
If an employee takes holiday with the leave request and the manager rejects this leave request, a work item is created in the UWL box of the employee. Processing this work item leads to the following error:
Application error occurred during request processing. Details:
com.sap.tc.webdynpro.services.sal.core.DispatcherException: The requested deployable object 'com.sap/ess~lea' and application 'LeaveRequest' are not deployed on the server. Please check the used URL for typos.
Exception id: [C0000A7D0192002A0000000400000B7E000431AA883F1DCE]
But the application is ready deployed (the employee take this appl- to create the leave request
In the ERp2005 / HCM customizing, transaction SWFVISU the approval task TS12300097 uses application "LeaveRequestApprover" is working fine.
TS12300116 uses application "LeaveRequest" leads to this error... :-(((
Does any body have an Idea ??
Please help!
Thx mario

Hi,
which version do you have?
I have ECC 5.0 and problem I solved in SWFVISU transaction, for TS12300097 parameters, changing to package sap.com/ess~lea.
By default is 'com.sap.xss.hr.lea.appl/LeaveRequestApprover' and this is the problem, in UWL xml configuration, package pointing is sap.com/ess~lea.
Check this, and comment the results,
regards,

Error:System rejects all logons using SSO tickets:RRMX

Hi,
I have created a System in my portal which connects to the BW system.I am able to execute the transaction RSA1 by creating a transaction iview which connects to the system created above but when i try to execute RRMX in a transaction iview i get an error displaying a message : System rejects all logons using SSO tickets.
The transaction iview uses WinGUI.
Please let me know if anyone has the solution for this.
ThanksInAdvance,
Varma.

Hi Rajendra,
I guess you need rrmx access to change the queries ? i that is the case did you guys try role "com.sap.ip.bi.business_explorer_showcase" which has Bex web analyzer, where in you can create or modify queries in Java built in iviews. Have a look at that and hope it might be useful.
Thanks,
Praveen
PS.Dont forget to reward points

2nd time Loop error in rejection reason/changes req

Hello experts,
I have created an wf with loop step.
In that loop branch,m displaying a doc in approvers inbox, then i have put a decision step with 2 button - 'Approve' and 'Changes req'.
For button Changes req, loop will continue.ok
In tht changes req branch, i hv put a task of BO SOFM, method- create for approver so tht he can enter thr wht r the changes he wants.
thn i hv put task as BO SOFM, method-display for initiator so tht he can see the changes req.
thn doc will opened in edit mode for initiator to make req changes.
thn it will agn go back to approver for approval.
he will agn get the decision screen with 2 buttons.
now while testing this....this all worked fine when approver clicked in button 'changes req' in decision box..after tht SOFM create worked fine.
But during 2nd time whn approver is checking the doc 2nd time and still he again wants some other changes to be done so he will agn click on button 'changes req'. this 2nd time tht SOFM-create is not working and wf goin to error as -
1. Notification of completion cannot be generated
2. Problems occurred when generating a mail
3.Error '9' when calling service 'SO_OBJECT_SEND'
4.Error handling for work item 000000006050
PLz suggest how this can be solved.
Best Regards
Nitin

I think you might have to use the EDIT method of SOFM Business Object as you are going to change the existing document.
Thanks
Arghadip

I can receive AOL email but when sending email I get an error recipient rejected by server because it does not allow relaying

Brand new iPhone 4S Verizon. Using AOL. Works (or at least did yesterday) from iPad 2.

I am having a similar issue. I have a 3GS. I can receive email messages, but, cannot reply or send from my iPhone. When I try to send, I get a message: "A copy has been placed in your outbox. Sending the message content to the server failed." I have an AOL account. The last time I think I sent an email using my iPhone was around 7/4/12. I spent several hours yesterday with AT&T. They gave me the phone number for AppleCare. The technician suggested I begin with this forum before paying for a one time trouble shoot. He suggested that AOL can only be logged on to one device at a time. I logged off our PC turned off the phone. Turned the phone back on. Went to the outbox and tried to resend a test msg. I got the same error.

Sr Expert Advise from Forum

Hi,
secnario rfc>soap(Digitally sign and encrypt)
error: IAIK REJECTED BY CERTICATE
we are trying to test signing and encryption using soap1.1 in pi7.11 system
we created test interface ,we checked mapping it is ok
i created private certificate and generated CA using service.sap.com/tcs and copied and pasted the response to same txt file which pem and renamed it as crt
now,i loaded the crt file to default Q in NWA as x.509 certificate
I have selected only sign option in reciver agreement ,activated and tested with triggering rfc ,error iaik peer certificate rejected
Tried all possible ways:
1)tried with custom view and default view/no go
2)tried by putting the x509 certificate in trusted CA,as it is a test certificate generated from service,sap.com/tcs,no orginal CA
3)Restarted java engine,icm,checked all settings like rfc etc
4)Followed all the instructions by forums,blogs,wikis
Need step by step advise and help,by an sr Expert in Forum

Hi,
Send it to my Id.will check and let you know.
my id: vasu.malyavantham at gmail dot com
Thanks,
Vasu.

Logon rejected for Unable to obtain Terminal Server User Configuration. Error: Not enough resources are available to complete this operation.

Error: Logon rejected for Unable to obtain Terminal Server User Configuration. Error: Not enough resources are available to complete this operation.
The problem is that the SharePoint server will
function just fine for a week or so and then suddenly when a new user tries
to log on they get an error message indicating that not enough resources areavailable to
log them on and also user will to credential prompt while accessing share point site .
Raj

Hi,
According to the error message, please use performance monitor to diagnose if it is a memory-related bottleneck and you can use the counters of the memory part in the article below:
https://technet.microsoft.com/en-us/magazine/2008.08.pulse.aspx
In addition, it may be due to thousands of open connections to the server are in a TIME_WAIT state. You can run "netstat -an" command on the affected server and client. If you see mutiple connections in the TIME_WAIT state, you can follow the article
to increase the number of TCP/IP connections:
https://msdn.microsoft.com/en-us/library/ee377084(v=bts.70).aspx
Furthermore, if you are running windows server 2003, please make sure that you have installed the KB 948496 and stop all services that you don't need.
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How Solve this iaik.pkcs.pkcs1.b.b(Unknown Source) Error.

Hi Experts
I am trying to decrypt the user login credentials while logging to SAP portal. Bellow code is used.
PrivateKey privKey = bean.getRandomKey();
Cipher cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.DECRYPT_MODE,privKey);
cipherData = cipher.doFinal(new BASE64Decoder().decodeBuffer(enPwd));
But I am getting the error specified below, May I kindly request you please give me some approach to resolve this problem if you have come across the same issue earlier.
iaik.pkcs.pkcs1.b.b(Unknown Source)
iaik.pkcs.pkcs1.RSACipher.a(Unknown Source)
iaik.pkcs.pkcs1.RSACipher.engineDoFinal(UnknownSource)
javax.crypto.Cipher.doFinal(DashoA12275)
We use SAP Portal version 7.01 SP12 and JDK 1.4.2_19.
Configtool to set the path of the cookie and domain of the cookie are Changed.
"cluster-data" -> "Global Server Configuration" -> "services" -> "servlet_jsp"
Please find the attached image.
But Default setting are there that time it's working,But some security region that settings customized.the following way
JSESSIONID.CookieDomain = SERVER (Default value)
SESSIONID.CookiePath = APPLICATION(Custom values)
SAPLB.CookiePath = APPLICATION(Custom values)
SAPLB.CookieDomain = SERVER(Custom values)
This below settings is there that time working fine.
SESSIONID.CookiePath = / (Default values)
SAPLB.CookiePath = / (Default values)
SAPLB.CookieDomain = NONE(Default values)
Please give your suggestion and Help...Solution is Required.
Thank you && Regards,
Durga Rao

Dear Experts This is My Enter Error
iaik.pkcs.pkcs1.b.b(Unknown Source)iaik.pkcs.pkcs1.RSACipher.a(Unknown Source)iaik.pkcs.pkcs1.RSACipher.engineDoFinal(Unknown Source)javax.crypto.Cipher.doFinal(DashoA12275)sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)java.lang.reflect.Method.invoke(Method.java:331)com.sapportals.htmlb.page.DynPage.doProcessCurrentEvent(DynPage.java:173)com.sapportals.htmlb.page.PageProcessor.handleRequest(PageProcessor.java:119)com.sapportals.portal.htmlb.page.PageProcessorComponent.doContent(PageProcessorComponent.java:134)com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)com.sapportals.portal.ume.component.logon.SAPMLogonCertComponent.doContent(SAPMLogonCertComponent.java:33)com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:235)com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:557)java.security.AccessController.doPrivileged(Native Method)com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:430)javax.servlet.http.HttpServlet.service(HttpServlet.java:853)com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1060)com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)java.security.AccessController.doPrivileged(Native Method)com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

Load Rejected HC error on 7945

Hello,
We had 2 new employees start today, and when trying to setup 2 new 7945 model phones out of the box, we keep getting the error "Load Rejected HC". This would happen after it upgraded some software on the phone, reset, etc. Any help with how to correct this issue would be greatly appreciated. Thank you in advance.
CISCO VoIP System Info:
Cisco Unity Connection version: 8.6.2ES25.21900-25
CM Admin System version: 8.6.2.21900-5
On 2 C200M2 Servers

Hi Joseph,
Here's most likely why you are seeing that error;
Hardware Updates
The hardware updates improve the compatibility of internal phone components.
The following tables list the updated hardware versions that require this release.
Phone
Hardware Version
Cisco Unified IP Phone 7942
15.0 and higher
Cisco Unified IP Phone 7945
13.0 and higher
Cisco Unified IP Phone 7962
15.0 and higher
Cisco Unified IP Phone 7965
13.0 and higher
Cisco Unified IP Phone 7975
12.0 and higher
Cisco IP Phones 7942, 7962, and 7975 manufactured with hardware versions as mentioned in the table above must run Firmware Release 9.3(1)SR1 or later. The phone firmware does not allow the phone to be downgraded to releases earlier than Release 9.3(1)SR1.
Cisco IP Phones 7945 and 7965 manufactured with hardware versions 13.0 and higher must run Firmware Release 9.3(1)SR3 or later. The phone firmware does not allow the phone to be downgraded to releases earlier than Release 9.3(1)SR3.
From;
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cuipph/7900_series/firmware/9_3_1SR4/english/release_notes/P790_BK_RF3660D6_00_rn-9_3_1sr4-7900-series/P790_BK_RF3660D6_00_rn-9_3_1sr4-7900-series_chapter_00.html#P790_TP_H10D10F2_00
Go Flames Go!!.......and Flyers too :)
Cheers!
Rob

ERROR :IAIK REJECTED BY CERTICATE

Similar Messages

Maybe you are looking for