Certificate chaining error - WebSphere Application Server

Hi , I think you will need to check if you have the root and intermediate cert also imported in the default cell trust store, also make sure that you unset the JRE ca trust cert and restart the web-server. This might help you fix the problem. Obviously during the handshake the WebSphere server where the SDK is used is not able to retrieve the trust cert from the defaults cell trust store and this can be caused by many reasons: 1. The user running the SDK does not have permission to retrieve the cert. 2. miss configuration of root , intermediate and signer cert each on the right place or anything else. Again this is not an SDK problem rather than infra problem. Kind regards, Imane

In case this saves anyone some time, here are the two things that I found that caused me a huge headache: 1) The version of StringEntity available to me in WebSphere was older and did not have the method StringEntity(String, Charset) 2) The buildHttpClient() call in RestClient.java was unfriendly to WebSphere, it defaulted to using the Java cacerts store instead of WebSphere's default trust store, which caused issues when we had our various security appliances put into play. I ended up creating my own versions of EslClient.java and RestClient.java. EslClient.java changes were only necessary to use my custom version of RestClient. To get around method not found / classpath issues with #1 above, I used the older/available version of StringEntity:

StringEntity body = new StringEntity(jsonPayload, CHARSET_UTF_8);
            vs
StringEntity body = new StringEntity(jsonPayload, Charset.forName("UTF-8"));

And to use the WebSphere default Trust Store, I ended up adding the simple line .useSystemProperties() to the HttpClients.custom() call in RestClient.java's buildHttpClient(). I won't tell you how long that took me to find! Still looking at alternatives, as RestClient.java is an internal file for the Silanis SDK and I'd rather avoid making changes to the underlying SDK.

private CloseableHttpClient buildHttpClient() throws HttpException {
        final HttpClientBuilder httpClientBuilder = HttpClients.custom().useSystemProperties();