E-IB: Unable To Load Gateway Connectors After Installing SHA2 Certificate Due To Error - "Cannot convert identity certificate"

(Doc ID 2064375.1)

Last updated on MARCH 20, 2017

Applies to:

PeopleSoft Enterprise PT PeopleTools - Version 8.51 to 8.53 [Release 8.4]
Information in this document applies to any platform.
***Checked for relevance on 20-MAR-2017***


On :  PeopleTools 8.51

Unable to load gateway connectors after changing to use SHA2 certificate, it only works on SHA1

General Connection Failed (158, 10836)

  <Inconsistent security configuration, java.lang.RuntimeException: Cannot convert identity certificate> for SSL, java.io.IOException: Cannot convert identity certificate.>

The issue can be reproduced at will with the following steps:

1.  Navigate to >PeopleTools>Integration Broker>Configuration>Gateways>Local
2.  Gateway pings with success
3.  Load Gateway Connectors fails with the following errors:

On Screen:
integration Gateway: General Connection Failed (158, 10836) Bad gateway URL Sync service Timeout set...)

Application Server Log:
The error message is "Java exception thrown: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Untrusted Server Certificate Chain"

Weblogic Logs:
<Emergency> <Security> <BEA-090034> <Not listening for SSL, java.io.IOException: Cannot convert identity certificate.>


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms