Back to Contents

Troubleshoot Common Issues

You may encounter known (and common) issues when completing the Genero Web Services tutorials or when adding Web services of your own. These issues and their solutions are listed below.

• HTTP 401 error message
• Peer certificate is issued by a company not in our CA list

HTTP 401 error message

An HTTP 401 error message means the server is asking for, but not receiving, authentication (login and password). This means authenticate.xxx.login and authenticate.xxx.password are not correctly configured. The login and password should be provided in the FGLPROFILE.

Solution:

1. Open the FGLPROFILE used by the application.
2. Add entries for authenticate.xxx.login and authenticate.xxx.password.
3. Save your changes.

Related topics:

• HTTP basic or digest Authentication
• FGLPROFILE password encryption

Back to the top

Peer certificate is issued by a company not in our CA list

This error means the client CA list does not contain the Server CA. To display the client CA list, use the following command:

openssl x509 -in MyCompanyCA.crt -noout -text

Solution:

1. Add the server CA list to the client CA list.

   openssl x509 -in MyCompanyCA.crt -text >> ClientCAList.pem

Theory:

Usually certificates work in pairs: a public key and a private key.

This means that the client has a certificate that can be signed by an authority signed itself by a root authority. Likewise, the server has a certificate that can be signed by an authority signed itself by a root authority. In some instances, a certificate can be signed by itself.

Things to remember:

• The server certificate should have its hostname as CN (Common Name). For example: if you want to access the server https://www.mycompany.com the CN should be www.mycompany.com.
• In client CA list you should have all the CA of the server. In this example you need the CA (server) and the RootCA. If the server is self-signed then add the server certificate to the client CA list.
• Sometimes, the needed CA are not listed in the certificates hierarchy. Setting environment variable FGLWSDEBUG=3, will give you information about the missing CA.

Back to the top