SA-16912

Summary

Invoking a REST Service from within Pega results in a SSL handshake error

Error Messages

javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

Steps to Reproduce

Invoke REST service from Pega

Root Cause

A defect or configuration issue in the operating environment.  The certificates needed for the SSL connection are not defined in the Pega Truststore.  In Pega 7.1.7+ the management of the truststore used in the SSL handshake should be handled by Pega.  On the Connect-Rest rule there is a property that will allow you to specify a truststore with the needed certificates.  

Resolution

Make the following change to the operating environment:  

Explicitly provided a trust store in the REST connector rules

Here is a video that talks about this type of issue.

https://pdn.pega.com/pegatube/support-guide-how-to-solve-a-certificate-exception-error-during-ssl-handshake