PCSF_46002 Peer certificate cannot be authenticated with given CA certificates

After going crazy for about two hours to solve this simple error: “Peer certificate cannot be authenticated with known CA certificates using PHP OAuth extension” I searched for many queries like “unable to get local issuer certificate” or “cacert.pem” and finally figured it out.

If you search online you will run into a lot of cacert.pem solutions but its actually not the right one.
Lets get right into it:

1) Download the certificate file like

wget http://curl.haxx.se/ca/cacert.pem

2) Copy the downloaded file and paste to the following directory and make sure the read/write permission are setup correctly.

/WHATEVER-APP-YOU-ARE-USING/openssl/cacert.pem 

(replace the first folders with your own app.) For example Im using AMPPS so my file directory is different than MAMP or XMPP. Very imporant to get the correct path here.

3)Add the following line to your php.ini (make sure its the correct version and dont just drop it the the first one you see there)

openssl.cafile=/Applications/AMPPS/php-5.6/cacert.pem 

4) Restart the Apache Server and you are good to go.

If you cant get this going then go back and see what you did wrong because it works

PCSF_46002 Peer certificate cannot be authenticated with given CA certificates

PCSF_46002 Peer certificate cannot be authenticated with given CA certificates

PCSF_46002 Peer certificate cannot be authenticated with given CA certificates

PCSF_46002 Peer certificate cannot be authenticated with given CA certificates

Last Modified Date6/5/2018 10:58 PM

Synopsis

This article provides details on the error message "Peer certificate cannot be authenticated with known CA certificates" in the PCS or PPS event log when attempting to register the appliance with Pulse One.

Problem or Goal

When attempting to register a PCS or PPS device with Pulse One, registration fails and the following error message is logged in the PCS/PPS event log:

major - Root::System()[] - 2016/04/15 16:19:49 - Pulse One URL https://api-acmegizmo.pulseworkspace.net Response 598582175: Status: None: Transfer returned result code 60 (Peer certificate cannot be authenticated with known CA certificates). Error Message: SSL certificate problem, verify that the CA cert is OK. Details: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed.

Cause

This issue occurs when the PCS or PPS device does not have the proper certificate authority installed under the Trusted Server CAs option.

Solution

To resolve this issue, obtain the root certificate authority (CA) certificate used for the Pulse One device, then install the CA in the PCS/PPS Trusted Server CAs store.

  1. Login to the PCS or PPS admin console
  2. Navigate to System > Configuration > Certificate > Trusted Server CAs
  3. Click Import Trusted Server CAs
  4. Click Browse
  5. Browse to the certificate authority file
  6. Click Import Certificate
  7. Navigate to System > Configuration > Pulse One
  8. Click Save Changes to reattempt the registration again

Note: From a Web browser, browse to the Pulse One portal, then right click on the page and select the option to view the certificates for the site, which will show the certificates that need to be installed in the PCS/PPS trusted server CA certificate store. 

Symptom

  • When you run a task in CPI-DS, you face the error below.
  • Error: "60:Peer certificate cannot be authenticated with given CA certificates".

Read more...

Environment

SAP Cloud Platform Integration for Data Services

Product

SAP Cloud Integration for data services all versions

Keywords

loader, ssl, security, version, HCI, CA, certificate, 60, cert, soap, rest , KBA , EIM-HCI , SAP HANA Cloud Integration (Data Services) , LOD-HCI-DS , HANA Cloud Integration for Data Services , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.