SAP PI 配置SSL链接接口报错问题处理Peer certificate rejected by ChainVerifier

最新推荐文章于 2025-05-27 09:31:37 发布

原创

最新推荐文章于 2025-05-27 09:31:37 发布 · 1.8k 阅读

CC 4.0 BY-SA版权

文章标签：

文章讲述了在SAPNetWeaverAdministrator中遇到证书导入问题的解决办法，包括未导入证书、证书过期以及证书冲突的情况，并提到了使用XPI_inspector工具进行故障诊断。

出现这种情况一般无非是没有正确导入证书或者证书过期的情况

第一种，如果没有导入证书的话，需要在NWA中的证书与验证-》CAs中导入管理员提供的证书，这里需要注意的是，需要导入完整的证书链。

第二种如果是证书过期的，可以直接导入新的证书，如果出现冲突的情况需要把对应的证书删除，然后再导入新的证书，以下是SAP提供的原因解释3076281：

Make sure that backend server's certificate chain has correct hostname and does not include unsupported characters. Also make sure there is no other certificate with the same value of Subject existing in TrustedCAs. Two certificates with the same Subject value can't co-exist in one keystore view. If it exists, then at runtime, during SSL handshake, a lookup is done only once based on Subject value thus can results in titled error, finally cause SSL failure.
For example:
AS Java AAA is SSL client. AS ABAP BBB is SSL server and AS ABAP CCC is another SSL server. Both BBB and CCC has SSL certificate with same Subject value but the serial number is different. Such as:
--------------------
BBB:<