[Resolved] Bad certificate / Remote Issuer not found

Published in December 14th, 2010

Bonjour,

Je suis sur une Gateway, et un client CFT 2.6.3 essaie de se connecter en PeSIT/SSL.
Nous avons une erreur “Bad certificate” côté Gateway, et “Remote Issuer not found” côté CFT.

Quelqu’un a-t-il une idée pour savoir d’où vient l’erreur ? De la GW ou du CFT ?

Merci d’avance.

CODE

10/12/14 16:25:02 CFTY02Z >> CTX=200063 Remote Issuer DN = /C=US/O=Thawte, Inc./CN=Thawte SSL CA
10/12/14 16:25:02 CFTY02Z >> CTX=200063 Remote Serial Number dump
10/12/14 16:25:02 CFTY02Z >> CTX=200063 7E0A9BD3 8A02267C 21820B24 800AAF64 >……………d<
10/12/14 16:25:02 CFTY02Z >> CTX=200063 00000000 00000000 00000000 00000000 >…………….<
10/12/14 16:25:02 CFTY02Z >> CTX=200063 00 >.<
10/12/14 16:25:02 CFTY02Z >> CTX=200063 Remote Issuer not found
10/12/14 16:25:02 CFTY02Z >> CTX=200063 cftpki() _ PKII PHASE=CHKCERT CR=1 REASON=42
10/12/14 16:25:02 CFTY18E CTX=200063 INTERNAL PKI ERROR PHASE=CHKCERT REASON=42
10/12/14 16:25:02 CFTY02Z >> CTX=200063 SSLact() _ SENDING 7 ALERT DATA
10/12/14 16:25:02 CFTY02Z >> CTX=200063 15030100 02022A >…….<
10/12/14 16:25:03 CFTY18E CTX=200063 Check_Certificate error

EDIT: Le problème venait du fait qu’il lui avait été fourni notre certificat “user” et pas “root”…

Support for certificate key > 2048 bytes

Published in December 14th, 2010

Posted by Tony in Axway Forum Syndicate

No Comments

Hello,

We are currently using CFT/MVS v2.32 with SSL. Our certificates are soon to expire, and our certificate provider has sent us new certificates. Unfortunately, the Root CA provided with the new certificates has been generated with a 4096 byte key, which apparently is not supported under CFT 2.32. We get the following error when importing the user certificate.

PKIU20I Error d2i_RSAPublicKeyPrimitive: KeyLenMod = 512
PKIU26E PKICER _ Error ( Signature check failed {15036/0} )

I have been browsing the documentation of CFT/MVS v2.4 and v2.6 but I cannot find any information about support for this. Has anyone using CFT/MVS v2.4 or later encountered this problem?

Best regards,
Sebastian Dewar

Dinamic Query

Published in December 13th, 2010

Posted by Tony in Axway Forum Syndicate

No Comments

Hi folks,

As you may know I’d made a query to retrieve information depending on the client the user had chose.
I’ve seen that the query is slow, probably because it’s an union of too amny queries and it takes time. I’m thinking about changing it to request the information once depending on the value of the parameter instead doing all that work.

So, I’m trying to carry out a query like this:

If TrkParameter(Client) = “ClientA” then
Select queryA
elseif TrkParameter(Client) = “ClientB” then
Select queryB
.. so on

I cannot make it.

ps:
I also tried like this:
if select ‘TrkParameter(Cliente)’ from dual = ‘ClientA’ THEN
select ‘ClientA’ FROM dual
ELSE
select ‘another’ from dual
END IF

and won’t get anything but a server error (as all tries)

have a nice day!

“Algorithm identifier (ssh-rsa) is not compatible with the one requested (ssh-dss) check configuration

Published in December 6th, 2010

Posted by Tony in Axway Forum Syndicate

No Comments

Dear All,

We are facing some issues with new SFTP connectivity to our client.
we could estalish the SFTP connectivity manually using SFTP protocol from Backend. But when the same is configured in Gateway front-end we are facing issues with connectivity and getting the following error “Algorithm identifier (ssh-rsa) is not compatible with the one requested (ssh-dsa) check configuration”
please help..

Regards,
Satish

AS2 - file name overriding problem

Published in December 1st, 2010

Posted by Tony in Axway Forum Syndicate

No Comments

Hi All,

We use AS2 to send messages to one of our as2 patner and we use XIB211 + XFB685

requirement :
we need the file name to be onveridden in (HTTP104I 01.12.2010 13:11:49 (90) S Content-Disposition: attachment; filename=smime.p7m.) when sening message from XFB, although we have tried to override the options in XIB when sending to XFB, it does not seems to work,

#Override XFB attibutes
$XFBOutputAttributesOverride.$Use_ContentType= TA_XFB.$True;
$XFBOutputAttributesOverride.$ContentType=”application/xml”;
$XFBOutputAttributesOverride.$Use_AttachmentFileName = TA_XFB.$True;
$XFBOutputAttributesOverride.$AttachmentFileName = $FileName;
$XFBOutputAttributesOverrideString = TA_XFB.PackEDIINTSendMethodOverrideAttribute($XFBOutputAttributesOverride);

any one has an idea ?

XFB Log :

HTTP104I 01.12.2010 13:11:49 (90) S AS2-From: 7381000070105.
HTTP104I 01.12.2010 13:11:49 (90) S AS2-To: 031984771.
HTTP104I 01.12.2010 13:11:49 (90) S AS2-Version: 1.1.
HTTP104I 01.12.2010 13:11:49 (90) S Date: Wed, 01 Dec 2010 12:11:46 GMT.
HTTP104I 01.12.2010 13:11:49 (90) S Message-Id: <PHMB.1291205506.6023@FOXCONN>.
HTTP104I 01.12.2010 13:11:49 (90) S Disposition-Notification-To: 7381000070105.
HTTP104I 01.12.2010 13:11:49 (90) S Disposition-Notification-Options: signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, sha1.
HTTP104I 01.12.2010 13:11:49 (90) S Content-Type: application/pkcs7-mime; smime-type=enveloped-data; name=smime.p7m.
HTTP104I 01.12.2010 13:11:49 (90) S Content-Transfer-Encoding: binary.
HTTP104I 01.12.2010 13:11:49 (90) S Content-Disposition: attachment; filename=smime.p7m.
HTTP211I 01.12.2010 13:11:49 FOXCONN(90) [6023] FOXCONN Start sending file: /opt/elcomxfb/Gateway/run_time/tmp/F0006023.ec.
HTTP104I 01.12.2010 13:11:50 (90) R HTTP/1.0 200 OK.
HTTP104I 01.12.2010 13:11:50 (90) R AS2-From: 031984771.
HTTP104I 01.12.2010 13:11:50 (90) R AS2-To: 7381000070105.
HTTP104I 01.12.2010 13:11:50 (90) R AS2-Version: 1.1.
HTTP1
thanks

FTP Command

Published in December 1st, 2010

Posted by Tony in Axway Forum Syndicate

No Comments

Hi,

In the FTP command box I’m trying to execute a “AC_QUOTE DELE <path><filename>” command. However when checking the command executed on the FTP server I see the command is truncated.
Seems that the FTP command box is limited to 80 characters.

The directories change so I cannot execute the CWD in the Remote site to already set the right path.
I also try to avoid creating a 2nd Remote Site.

Is there a way that I can still execute DELE commands to remove long path/filenames?

Thanks a lot in advance.

Best regards,
Steve

Newer Entries »