| Summary | My Artix client can not authenticate with a secure Artix server. |
|---|---|
| Article Number | 13640 |
| Environment | All Supported Operating Systems Artix 4.x Artix 5.x |
| Question/Problem Description | My Artix client can not authenticate with a secure Artix server. Artix client get the following exception when establishing a secure connection: E - External Toolkit Error: Certificate Chain Rejected.Certificate[0] E - External Toolkit Error: Certificate Chain Rejected. Certificate[0] |
| Clarifying Information | |
| Error Message | |
| Defect/Enhancement Number | |
| Cause | Length of SSL certificate chain is higher than Artix default length |
| Resolution | A certificate chain is a sequence of certificates, where each certificate in the chain is signed by the subsequent certificate. The purpose of certificate chain is to establish a chain of trust from a peer certificate to a trusted Certification Authority (CA) certificate. The CA vouches for the identity in the peer certificate by signing it. If the CA is one that you trust (indicated by the presence of a copy of the CA certificate in your root certificate directory), this implies you can trust the signed peer certificate as well. Artix supports chained certificates, however, the default chain length is 2. In order to change it, please add the following configuration to the process configuration scope: policies:max_chain_length for example, for a max chain length of 5, the configuration line should be: policies:max_chain_length = "5";
|
| Workaround | |
| Notes | |
| Attachment |
| Created date: | 06 September 2011 |
|---|---|
| Last Modified: | 13 February 2013 |
| Last Published: | 23 June 2012 |
| First Published date: | 09 September 2011 |
#Orbix
#KnowledgeDocs