Skip to main content
Solved

javax.net.ssl.SSLHandshakeException: Chain validation failed

  • April 5, 2022
  • 5 replies
  • 2642 views

Forum|alt.badge.img+8
  • Sidekick (Customer)
  • 42 replies

Hi there, 

 

Has anyone experienced this error before? Affects all IFS mobile apps - on Apps 9. 

I’ve checked all SSL certificates and all seem to be in date. I have rebooted the servers hosting uplink etc but still no joy. 

 

Thanks,

Kasia 

Best answer by Kasia

Easiest method to check, browse to the site URL using e.g. a modern and up to date e.g. edge browser - if that rejects, you’ve got a problem but fixing is going to be down to wherever the hosting is which I think maybe IFS for touch apps but doesn’t have to be.

 

Matt

@cmlmfreeman  thanks for all your replies! I think the issue might be with cloud.ifsworld.com 

I’ve reached out to IFS support as well. 

 

Thanks,

Kasia 

Issue in fact was from IFS. Their cloud.ifsworld.com SSL certificate was expired. Therefore outside of customer’s control. 

5 replies

Forum|alt.badge.img+2
  • Do Gooder (Customer)
  • 6 replies
  • April 5, 2022

Hi,

 

Have you checked if certs are SHA1 SHA256 (now needed) and TLS on the host is 1.2? If you’re below these then chances are you’ll get an SSL exception which could break the chain now.

 

Matt


Forum|alt.badge.img+8
  • Author
  • Sidekick (Customer)
  • 42 replies
  • April 5, 2022

Hi,

 

Have you checked if certs are SHA1 SHA256 (now needed) and TLS on the host is 1.2? If you’re below these then chances are you’ll get an SSL exception which could break the chain now.

 

Matt

Hey @cmlmfreeman,

Certs seem to be SHA1 SHA265… how can I check TLS? 

 

Many thanks! 

Kasia 


Forum|alt.badge.img+2
  • Do Gooder (Customer)
  • 6 replies
  • April 5, 2022

Easiest method to check, browse to the site URL using e.g. a modern and up to date e.g. edge browser - if that rejects, you’ve got a problem but fixing is going to be down to wherever the hosting is which I think maybe IFS for touch apps but doesn’t have to be.

 

Matt


Forum|alt.badge.img+8
  • Author
  • Sidekick (Customer)
  • 42 replies
  • April 5, 2022

Easiest method to check, browse to the site URL using e.g. a modern and up to date e.g. edge browser - if that rejects, you’ve got a problem but fixing is going to be down to wherever the hosting is which I think maybe IFS for touch apps but doesn’t have to be.

 

Matt

@cmlmfreeman  thanks for all your replies! I think the issue might be with cloud.ifsworld.com 

I’ve reached out to IFS support as well. 

 

Thanks,

Kasia 


Forum|alt.badge.img+8
  • Author
  • Sidekick (Customer)
  • 42 replies
  • Answer
  • May 12, 2022

Easiest method to check, browse to the site URL using e.g. a modern and up to date e.g. edge browser - if that rejects, you’ve got a problem but fixing is going to be down to wherever the hosting is which I think maybe IFS for touch apps but doesn’t have to be.

 

Matt

@cmlmfreeman  thanks for all your replies! I think the issue might be with cloud.ifsworld.com 

I’ve reached out to IFS support as well. 

 

Thanks,

Kasia 

Issue in fact was from IFS. Their cloud.ifsworld.com SSL certificate was expired. Therefore outside of customer’s control.