Skip to main content
Summary My Artix client can not authenticate with a secure Artix server.
Article Number 13640
Environment All Supported Operating Systems Artix 4.x Artix 5.x
Question/Problem Description My Artix client can not authenticate with a secure Artix server.
Artix client get the following exception when establishing a secure connection: E - External Toolkit Error: Certificate Chain Rejected.Certificate[0]
E - External Toolkit Error: Certificate Chain Rejected. Certificate[0]
Clarifying Information
Error Message
Defect/Enhancement Number
Cause Length of SSL certificate chain is higher than Artix default length
Resolution

A certificate chain is a sequence of certificates, where each certificate in the chain is signed by the subsequent certificate. The purpose of certificate chain is to establish a chain of trust from a peer certificate to a trusted Certification Authority (CA) certificate. The CA vouches for the identity in the peer certificate by signing it. If the CA is one that you trust (indicated by the presence of a copy of the CA certificate in your root certificate directory), this implies you can trust the signed peer certificate as well.

Artix supports chained certificates, however, the default chain length is 2.

In order to change it, please add the following configuration to the process configuration scope:

policies:max_chain_length

for example, for a max chain length of 5, the configuration line should be:

policies:max_chain_length = "5";

 

Workaround
Notes
Attachment
Created date: 06 September 2011
Last Modified: 13 February 2013
Last Published: 23 June 2012
First Published date: 09 September 2011

#Orbix
#KnowledgeDocs