000012841 - Error 10038 - R_ERROR_SSL_CONNECT - returned when hitting an RKM Appliance or Linux-based web server

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012841
IssueGetKey returns 10038 - R_ERROR_SSL_CONNECT
Apache error log returns "Certificate Verification: Error (26): unsupported certificate purpose"
 
CauseClient certificate contains only "All application policies (1.3.6.1.4.1.311.10.12.1)" in its Enhanced Key Usage extension
The trusted CAs and/or server chain is missing one or more of the chained CAs
ResolutionReissue your client certificate so that it contains SSL Client Authentication extensions
Check DPM to see if it has the full CA chain.
Legacy Article IDa59328

Attachments

    Outcomes