Kbase P184765: Error 9318 with error code -54 when trying to establish SSL connection via certificate that uses X50
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
3/25/2011 |
|
Status: Unverified
SYMPTOM(s):
ABL client is attempting to make an SSL connection via a socket to an external Web Service
Connection attempt fails with error 9318
Secure Socket Layer (SSL) failure. error code -54: non-critical basic constraint failure: for <filename> in $DLC/certs (9318)
Secure Socket Layer (SSL) failure. error code <err_number>: <ssl_error_message> (9318)
OpenEdge 10.0B05
FACT(s) (Environment):
OpenEdge 10.0B
All Supported Operating Systems
OpenEdge 10.x
CHANGE:
Server certificate was replaced with a new 2048 bit certificate which utilizes X509 constraints.
CAUSE:
OpenEdge 10.0B utilizes SSL functionality as that functionality existed in 2004 (7+ years ago). The SSL vendor that OpenEdge 10.0B used at that time did not provide complete support for X509 constraints.
FIX:
The application must be moved to a modern version of OpenEdge in which the SSL vendor that OpenEdge uses does provide support for X509 constraints.