Troubleshooting: Secure communication issues
How do I resolve SSL/TLS verification errors?
Below are some of the points you may need to perform if you encounter the SSL/TLS verification related errors:
Verify that all the applicable root and intermediate CA certificates are installed in Resiliency Platform for the host that you are connecting to. Refer the audit logs for relevant activity.
If you have the complete certificate chain file handy, execute the below command to verify the connection:
openssl s_client -servername myserver.com -connect myprimaryserver.com:443 -CAfile my_cert_chain.pem
The command output should indicate below:
Verify return code: 0 (OK)
If the above command indicates an error, obtain the required root and intermediate certificates for the server and install the certificates in Resiliency Platform.
Verify that the installed certificates are not expired. To verify this, refer the Status field from the certificates list in the Resiliency Platform web UI.
Verify that the hostname of the server is part of Subject Alternative Name field of the certificate presented by the server.
Verify whether the certificate authority for the server is changed. If so, then install the root and intermediate CA certificates in Resiliency Platform.
If you want to disable the certificate verification, refer See Managing security.