TIBCO - Server Certificate Rejected by Chain Verifier

Question

We are getting this error

"BW-HTTP-100300 Job-29000 Error in [Processes/Services/HTTP Request/Process Definition.process/Send HTTP Request] An IOException was thrown while trying to execute the Http method caused by: java.io.IOException: Failed to create secure client socket: Server certificate rejected by ChainVerifier"

I have done the following: 1. Created send http request. 2. Configured everything in the Configuration tab and the Input tabs.  3. Created Identity and imported the same into Identity 4. Downloaded the certificate and imported it in to 'Configure SSL' 5. While running the process I get the error mentioned above. 

Am I missing anything?   Please provide me some guidance.  Thanks in advance

Answer 1

Downloading the server certificate is not enough, you need to download the whole certificate chain from the root CA down to the server cert.

In the above example, you need to download all certs (except the last one mail.google.com which is optional) and add them to your trusted certificates folder.

Answer 2

Have you enabled VerifyHostName option while making the connection? If yes, then the server name should be in the allowed list too. In most cases you dont need this option enabled.