Resolved Secure Socket Layer (SSL) failure

[Marco Mendoza]

Hello all,

OpenEdge Release 11.6.3
AIX 7100-03-05-1524

I get error loading this webservice,

USING OpenEdge.Net.HTTP.*.
USING OpenEdge.Net.URI.
USING Progress.Json.ObjectModel.*.

DEFINE VARIABLE oRequest  AS IHttpRequest NO-UNDO.
DEFINE VARIABLE oResponse AS IHttpResponse NO-UNDO.

oRequest = RequestBuilder:Get('https://www.banxico.org.mx/SieAPIRest/service/v1/series/SF43718/datos/oportuno?token=61c09d2b2fb001039dff28d22cccec1b2349fa7ac3b7b1cdf576b163d5717e85'):Request.
oResponse = ClientBuilder:Build():Client:Execute(oRequest).

ERROR:
Secure Socket Layer (SSL) failure. error code -54: self signed certificate in certificate chain: for cbf06781.0 in /softqad/oe116/certs (9318)
Connection failure for host www.banxico.org.mx port 443 transport TCP. (9407)

certs directory:

-rw-rw----    1 root     system         2464 Oct 29 08:09 pemu1.pem
-rw-rw----    1 root     system         2464 Oct 29 08:09 0fc63d88.0
-rw-rw----    1 root     system         1728 Oct 29 08:10 pemu2.pem
-rw-rw----    1 root     system         1728 Oct 29 08:10 27eb7704.0
-rw-rw----    1 root     system         1367 Oct 29 08:10 pemu3.pem
-rw-rw----    1 root     system         1367 Oct 29 08:10 cbf06781.0

Any ideas?

 

[peterjudge]

This often means that you don't have the root CA certificate. You can see what that is using your browser (usually via clicking on the lock next to the URL bar). In this case, it's Go Daddy Root Certificate Authority - G2 . You should download and install that in the certs dir.

 

[Marco Mendoza]

This often means that you don't have the root CA certificate. You can see what that is using your browser (usually via clicking on the lock next to the URL bar). In this case, it's Go Daddy Root Certificate Authority - G2 . You should download and install that in the certs dir.

That is the weird thing, as you can see on the certs directory, there are 3 certs, I exported and Installed the 3 levels of certs ...

 

[Marco Mendoza]

This are the certs

 

[Marco Mendoza]

Solved: The issue was the file permission; I set the certs files to chmod 777 and the webservice works fine.