My Oracle Support Banner

'Cetificate Chain Received from Exchange' Error when Configuring SSL for Events Integration whith Exchange 2007 (Doc ID 1074234.1)

Last updated on OCTOBER 16, 2023

Applies to:

Oracle WebCenter Portal - Version 11.1.1.2.0 to 11.1.1.2.0 [Release 11g]
Information in this document applies to any platform.

Symptoms

Events Integration with Exchange 2007 was configure for SSL. When clicking on the link to login the service, the following error is displayed in the log:

javax.ssl.SSLKeyException:[Security: 090477] Cetificate chain received from exchange.<DOMAIN> - <IP_ADDRESS> was not trusted causing SSL handshake failure.



Changes

The following steps were followed to have this configuration:

1. Exchange 2007 Events service was set on the Exchange server.
2. The WSDL is accessible from workstations in the domain with SSL
https://<HOST>/EWS/Services.wsdl.

3. The WebLogic managed server for WebCenter Spaces has been configured with identity keystore and trust keystore. The trust keystore cacerts is under the
JAVA_HOME/jre/lib/security/.

4. The certificates for the WebCenter server and the Exchange server are issued by the same root CA in the domain. The certificate for the Exchange server is correctly added to the trust keystore cacerts.

5. Both identify and trust keystores are loaded when starting the managed server.

6. Using EM, added the Personal Events service following the instruction, with the correct URL https://<HOST>/EWS/Services.wsdl

7. Created external app with BASIC authentication.

8. Once the Managed server is started, added the Events service to a portlet.
9. When click the link to login the service, got error message in the log.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.