SAP Knowledge Base Article - Preview

3255183 - Incomplete certificate chain for custom domain

Symptom

  • After upload certificate for customer domain in Identity Authentication, you got SSL error in client application during SSLHandshake which is caused by incomplete certificate chain.
  • If you perform SSL Server Test via https://www.ssllabs.com/ssltest/analyze.html, you got result "This server's certificate chain is incomplete. Grade capped to B. ". Opening the section "Certification Paths" shows one of the certificate as "Extra Download".
  • Other similar websites like https://www.digicert.com/help/ and https://www.sslshopper.com/ssl-checker.html  will complain issues with certificate chain when a test is performed with the custom domain IAS tenant.


Read more...

Environment

Identity Authentication

Product

Identity Authentication 1.0

Keywords

IAS "Customer domain" "SSL Certificate" "Incomplete certificate chain",ssllabs,Extra download , KBA , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.