Symptoms

  1. Go Home > System > Settings > Remote Receivers
  2. Choose a Remote Receiver
  3. Click Test Connection

The following error is thrown:

Test FAILED with code 60: Peer's Certificate issuer is not recognized

or:

 Test FAILED with code 60: Peer's certificate issuer has been marked as not trusted by the user.

Despite of the fact that a ceritificate specified in Certificate in .pem format field is valid and signed by a Certificate Authority.

Cause

The documentation states:

Certificate in .pem format: SSL certificate of the external web service for secure exchange with OA Billing

Actually the system uses the certificate inserted into the field for the remote host verification, like it is used by #curl --cacert 'certificate.crt' 'https://remotehost.com' command.

A request #PBA-83768 "Inaccurate information regarding certificate in Remote Receiver configuration" has been created to correct the documentation.

Resolution

In case if the certificate used is signed by a CA, the CA certificate should be specified in the field.

If a certificate used by an external service is self-signed, the same certificate must be specified in the Remote Receiver configuration.

Internal content