SAP Knowledge Base Article - Public

3160958 - On-premise: SSL Certificate errors in Workflow Accelerator for Script Engine

Symptom

We do want to use the Workflow Accelerator with the Script Engine. We do use an SSL connection  and corresponding certificates, yet we get the error messages:

unable to get local issuer certificate

or

Error: self signed certificate in certificate chain

Resolution

  • Try to set NODE_EXTRA_CA_CERTS environment variable in OS
    • NODE_EXTRA_CA_CERTS <path to cert file as pem> (cert file incl. the cert chain with all aliases)
    • use cert file as pem format
  • Set global environment variable NODE_TLS_REJECT_UNAUTHORIZED=0 on CMD prompt to test if path or cert file config is valid (if not, an error will appear in CMD prompt and tell you what is wrong)
    • npm set --global NODE_TLS_REJECT_UNAUTHORIZED=0 (you can add this also in OS system environment variables)
    • After enableing NODE_TLS_REJECT_UNAUTHORIZED=0 you will see also entries in script-engine.log file TLS has been disabled etc.
  • Restart script server after changes

Keywords

KBA , BPI-SIG-PG-ONP-SE , Script Engine for SAP Signavio Process Governance , How To

Product

SAP Signavio Process Governance all versions ; Workflow Accelerator by Signavio all versions