SAP Knowledge Base Article - Public

2321147 - MP: exception caught with cause iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

Symptom

Certificate error during SAP HCM to SF AddOn Integration execution:

Axis: error in invocation: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

MP: exception caught with cause iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

Exception caught by adapter framework: ; nested exception is:

iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

Transmitting the message using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

Message status set to FAIL

Environment

SAP HCM System

SAP PI

Cause

Certificates are missing

Resolution

Make sure Successgactors certificates has been maintained.

Below are the 3 certificates which you need to maintain in your SAP PI:

  1. Root Certificate
  2. intermediate Certificate
  3. Leaf certificate

How to download certificates:

  • Check which URL you are using to login to SF system i.e. for example if your SF instance is in DC8 datacenter then URL would be https://performancemanager8.successfactors.com
  • Open this URL in chrome browser (IE does not allow to download intermediate and Leaf certificate)

 1.PNG

  • Click on Detail -> View certificate
  • Under "Certificate Path" tab, you will see 3 certificates as shown below:

2.PNG

  • Root: Verisign; Intermediate: Symantec Class; Leaf: Successfactors.com
  • Now select VeriSign and click on "view certificate". Go to Detail tab.Click on "Copy to File" option to download the root certificate:

3.PNG

  • Now, go back to main certificate screen and select "Symantec Class 3 Secure Server CA -G4" and click on "view certificate". Go to Detail tab.Click on "Copy to File" option to download the intermediate certificate:

 

 4.PNG

  • Now, go back to main certificate screen. Select "Successfactors.com" and click on "view certificate". Go to Detail tab.Click on "Copy to File" option to download the leaf certificate.

NOTE: If you face any difficulties while downloading certificate then try downloading the same via Mozilla Browser.

It can be done via Secure Connection->Security->View Certificate->detail. Here, you can select the certificate and then click on "Export".

Keywords

KBA , LOD-SF-INT , Integrations , Problem

Product

integration add-on for SAP ERP HCM and SAP SuccessFactors HCM all versions