webMethods Integration Server cannot import client certificate

, ,
1

Product/components used and version/fix level:

webMethods Integration Server 10.15.0.0 IS_10.15_SPM_Fix1 IS_10.15_Core_Fix9

Detailed explanation of the problem:

In administration console under Security → Certificates → Configure Client Certificates

I try to import a certificate for SSL Client Authentication and get the error

Error messages / full error message screenshot / log file:

Could not import certificate: iaik.asn1.CodingException: ASN.1 creation error:Length: Too large ASN.1 object: 58

What can be the issue here?

2

Hi Klaus,

can you try to check the certificate outside of the IS with OpenSSL or any other certificate management tool and check its properties?
Eventually, the private key for which the certificate was issued is to long.

Regards,
Holger

3

Hi Holger,

Thank you for your response.

Regards,
Klaus

4

Hi Klaus,

another hint from the net is to check for the serialNumber of the certificate as this might get longer than expected.
Remember, that the certificates will be stored in the ISInternal database schema and the column for the serialNumber has a limited length.
Check for the table IS_USER_CERTIFICATES.

Regards,
Holger

1 Like