Symptom
Certificate error during SAP HCM to SF AddOn Integration execution:
Axis: error in invocation: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
MP: exception caught with cause iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
Exception caught by adapter framework: ; nested exception is:
iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
Transmitting the message using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
Message status set to FAIL
Environment
SAP HCM System
SAP PI
Cause
Certificates are missing
Resolution
Make sure Successgactors certificates has been maintained.
Below are the 3 certificates which you need to maintain in your SAP PI:
- Root Certificate
- intermediate Certificate
- Leaf certificate
How to download certificates:
- Check which URL you are using to login to SF system i.e. for example if your SF instance is in DC8 datacenter then URL would be https://performancemanager8.successfactors.com
- Open this URL in chrome browser (IE does not allow to download intermediate and Leaf certificate)
- Click on Detail -> View certificate
- Under "Certificate Path" tab, you will see 3 certificates as shown below:
- Root: Verisign; Intermediate: Symantec Class; Leaf: Successfactors.com
- Now select VeriSign and click on "view certificate". Go to Detail tab.Click on "Copy to File" option to download the root certificate:
- Now, go back to main certificate screen and select "Symantec Class 3 Secure Server CA -G4" and click on "view certificate". Go to Detail tab.Click on "Copy to File" option to download the intermediate certificate:
- Now, go back to main certificate screen. Select "Successfactors.com" and click on "view certificate". Go to Detail tab.Click on "Copy to File" option to download the leaf certificate.
NOTE: If you face any difficulties while downloading certificate then try downloading the same via Mozilla Browser.
It can be done via Secure Connection->Security->View Certificate->detail. Here, you can select the certificate and then click on "Export".
Keywords
KBA , LOD-SF-INT , Integrations , Problem