000021192 - Problem with SSL Server certificate installed on Netegrity Affiliate Minder Agent

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000021192
Applies ToKeon Certificate Authority 6.x
Sun Solaris 2.8
Netegrity Affiliate Minder Agent
IssueProblem with SSL Server certificate installed on Netegrity Affiliate Minder Agent
Error:
Apr 14, 2004 4:16:01 PM[8145900:E] portaldispatcher: Error sending SOAP msg Apr 14, 2004 4:16:01 PM[8145900:E] portaldispatcher:Received exception com.rsa.ssl.AlertedException: Not signing certificate while building <AFFILIATEMSG><AFFMETHOD>GET_ASSERTION_FROM_REFERENCE</AFFMETHOD><PNAME>ASSERTION_REFERENCE</PNAME><PVALUE>AAG4GEUmEKDqQxv/ad00au7/gxKLanRIYzJYWFNuWmtldllKUkpDVEJUTFJnYkhOQT06ODg2M2NhNmRjODUwOTJlOA==</PVALUE><PNAME>AFFILIATE_NAME</PNAME><PVALUE>testaffiliate</PVALUE><PNAME>PORTAL_NAME</PNAME><PVALUE>AetnaPortal</PVALUE><PNAME>PORTAL_URL</PNAME><PVALUE>https://fs.aetnat.com/affwebservices/assertionretriever</PVALUE><PNAME>COMPANY_SOURCEID</PNAME><PVALUE>b818452610a0ea431bff69dd346aeeff83128b6a</PVALUE></AFFILIATEMSG> Apr 14, 2004 4:16:01 PM[8145900:E] Exception Stack Trace: com.rsa.ssl.AlertedException: Not signing certificate at com.rsa.ssl.ssl3.SSLV3ClientProtocol.init(SSLV3ClientProtocol.java:176) at com.rsa.ssl.ssl3.SSLV3ClientProtocol.<init>(SSLV3ClientProtocol.java:131) at com.rsa.ssl.common.SSLV3Loader.startSSL3ClientProtocol(SSLV3Loader.java:315) at com.rsa.ssl.common.ClientProtocol.sendHell

o(ClientProtocol.java:233) at com.rsa.ssl.SSLSocket.startHandshake(SSLSocket.java:403) at com.rsa.ssl.SSLSocket.getInputStream(SSLSocket.java:192) at com.netegrity.srca.connection.SSLHandler.startSession(SSLHandler.java:194) at com.netegrity.srca.Srca.invoke(Srca.java:211) at com.netegrity.srca.Srca.invoke(Srca.java:225) at com.netegrity.srca.Srca.invoke(Srca.java:225) at com.netegrity.srca.Srca.invoke(Srca.java:225) at com.netegrity.srca.Srca.invoke(Srca.java:225) at com.netegrity.srca.Srca.invoke(Srca.java:225) at com.netegrity.affiliateconnection.SmAffPortalDispatcher.ProcessMsg(SmAffPortalDispatcher.java:239) at com.netegrity.affiliateserver.SmAffPortalMsgHandler.SendPortalMsg(SmAffPortalMsgHandler.java:95) at com.netegrity.affiliatemsgs.SmAffGetAssertionMsgHandler.Process(SmAffGetAssertionMsgHandler.java:137) at com.netegrity.serverframework.SmMsgDispatcher.run(SmMsgDispatcher.java:132)
CauseNetegrity Affiliate Minder Agent can only use a V1 SSL Server certificate
ResolutionTo correct this problem, issue the SSL Server certificate on KCA with no extension thus making it a V1 certificate
Legacy Article IDa21504

Attachments

    Outcomes