Kbase P151189: Error 9318 when making a socket SSL connection
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
24/05/2011 |
|
Status: Verified
SYMPTOM(s):
Error 9318 when making a socket SSL connection
Secure Socket Layer (SSL) failure. error code -54: unable to get local issuer certificate: for 72fa7371.0 in <DLC>/certs (9318)
Connection failure for host <hostname> port 443 transport TCP. (9407)
FACT(s) (Environment):
OpenEdge 10.1C
OpenEdge 10.2x
CAUSE:
Bug# OE00198935
CAUSE:
The SSL server is sending two certificates in the SSL connection exchange: a) the SSL server's digital certificate; b) an intermediate verisign CA certificate. The error occurs in finding the verisign CA root certificate in $DLC/certs during the validation of the intermediate CA certificate. The verisign CA root certificate (72fa7371.0) shipped in the $DLC/certs directory does not have a matching certificate serial # that corresponds to the one in the intermediate CA's certificate.
FIX:
Install the correct version of the verisign CA root certificate, which is obtainable from verisign.