Cannot upload .pem to certificate based authentication

alamb
Tera Contributor

with Mutual authentication plugin added, I have been trying to upload CA Certificate Chain to enable Mid server Mutual Authentication. (Enable MID Server mutual authentication | ServiceNow Docs)

I receive the certificate files in .p12 format from the identity provider for midserver.app1938.com I have then tried to use openssl to convert the .p12 to .pem file (multiple times in multiple ways) when I upload the attachment .pem file, and validate I get the following errors:
(error)Unable to upload the certificate.Please check system logs for more information.
(error)invalid insert
(notification) Valid trust_store_ca

when I look at the system logs, I find the following:
WARNING *** Empty tomcat truststore
WARNING *** MutualAUth: certificate chain is not end with a CA cert.
ERROR *** AuthorityInfoAccess cannot be found
Failed to find matching sys_user_certificate with fingerprint: 09234083409283092038502935209384028304
Certificate Store certifiate of type pkcs12)key_store is NOT supported in cache!
loading trust store certificate (My root CA)

Is there something extra that I need to do for the server to accept the cert? I am really lost as to what the issue could be.

 

Thanks in advance

Andrew

1 ACCEPTED SOLUTION

ServiceNow Tec2
Mega Sage
This has been resolved by ServiceNow Technical Support. Please refer to KB0743854 (HI login required) for more information.

View solution in original post

3 REPLIES 3

ServiceNow Tec2
Mega Sage
This has been resolved by ServiceNow Technical Support. Please refer to KB0743854 (HI login required) for more information.

I can't see any relation to the question in the KB you provided.

 

J.Moral

There is nothing in that KB that has anything to do with MTLS or even certificates.