webMethods Knowlegebase : Cannot connect from Deployer to Universal Messaging (UM) using Secure Sockets Layer (SSL) (1798387)

Problem

In Deployer, we configure a new Universal Messaging server to be able to deploy to it.

When we press the Test button, it doesn't work and we get the following error messages.

It feels like the Deployer is presenting a certificate and UM is refusing it. It shouldn't send a certificate since we chose "Basic authentication".

Error inside Deployer:

Error connecting to server: [DEP.0006.0024] Plugin System Name: UM_Dev1, Plugin Type: Universal Messaging, Deployer tried to connect to the plugin-server with specified connection details but could not connect. Make sure that you are trying to connect to the correct plug-in server and that the plug-in server is up and running

Error in IS hosting Deployer:

[1377] at com.pcbsys.nirvana.base.clientimpl.singleconnection.ClientConnectionManagerImpl.establishConnection(ClientConnectionManagerImpl.java:742)

[1376] at com.pcbsys.foundation.io.fConnection.createConnection(fConnection.java:135)

[1375] at com.pcbsys.foundation.io.fDefaultConnectionFactory.establishConnection(fDefaultConnectionFactory.java:20)

[1374] at com.pcbsys.foundation.drivers.fDriverFactory.connect(fDriverFactory.java:187)

[1373] at com.pcbsys.foundation.drivers.fDriverFactory.connect(fDriverFactory.java:195)

[1372] at com.pcbsys.foundation.drivers.fDriverFactory.doConnect(fDriverFactory.java:253)

[1371] at com.pcbsys.foundation.drivers.fDriverFactory.attemptConnection(fDriverFactory.java:360)

[1370]Caused by: com.pcbsys.foundation.base.fException: SSL exception received when connecting to - [nsps://snwmumdpd1:5443/] (check cause for underlying exception) :: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticate

Error in UM:

[Mon Jul 08 14:31:31 EDT 2019] [nsps0 NIO Selector thread:0] [com.pcbsys.foundation] - nio.SSLChannel raised an exception : Received fatal alert: certificate_unknown Remote IP:/172.26.37.240:52100

[Mon Jul 08 14:31:31 EDT 2019] [nsps0 NIO Selector thread:0] [com.pcbsys.foundation] - javax.net.ssl.SSLException: Received fatal alert: certificate_unknown

javax.net.ssl.SSLException: Received fatal alert: certificate_unknown

at sun.security.ssl.Alerts.getSSLException(Alerts.java:208)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1666)

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1634)

at sun.security.ssl.SSLEngineImpl.recvAlert(SSLEngineImpl.java:1800)

at sun.security.ssl.SSLEngineImpl.readRecord(SSLEngineImpl.java:1083)

at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:907)

at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:781)

at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624)

at com.pcbsys.foundation.drivers.nio.ssl.SSLChannel.readAndDecrypt(SSLChannel.java:184)

at com.pcbsys.foundation.drivers.nio.ssl.SSLChannel.executeHandshake(SSLChannel.java:396)

at com.pcbsys.foundation.drivers.nio.ssl.SSLChannel.handleRead(SSLChannel.java:429)

at com.pcbsys.foundation.drivers.nio.io.SelectorThread.processKey(SelectorThread.java:308)

at com.pcbsys.foundation.drivers.nio.io.SelectorThread.processSelectKeysIterator(SelectorThread.java:277)

at com.pcbsys.foundation.drivers.nio.io.SelectorThread.run(SelectorThread.java:185)

at com.pcbsys.foundation.threads.fThread.localRun(fThread.java:114)

at com.pcbsys.foundation.threads.hThread.run(hThread.java:108)

at java.lang.Thread.run(Thread.java:748)

UM config:

Enable client cert validation is NOT selected.

Deployer config for UM connection:

Realm URL : nsps://XXXXXXXXXX:5443

Version 10.1

Client authentication : Basic authentication

Username : ...

Password : ...

We didn't specify any of the KeyStore/truststore information (the 4 fields are deactivated).