SAS VA LASR ERROR

[suman7]

Dear SAS community,

We have VA 7.3

Installed in distributed mode.

We are facing below error after renewing SSL certificate. Please help us how to fix it.

ERROR:OpenSSL error 336134278(0x14090086) occurred in SSL_connect/accept at line 5388 error message is "error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed.

ERROR:Unable to connect to Signing Server.

ERROR:Write access to member LASRLIB.VA_TABLE.DATA is denied.

[Anand_V]

Hi @suman7 

Were the certificates renewed and imported correctly in the SAS environment? Could you please share if you have any other web applications like SAS Studio installed which is working or failing with similar error?

[suman7]

Thank you for the revert.

Web certificate is replaced on Web server and root certificate was imported on all the tiers. SAS Studio, SAS Admin, SAS Enterprise Case Management applications are working with out any error.

Can you please advice how to check if we have missed during importing root certificate?

[Anand_V]

Please go through this KB link which has few options to diagnose the cause of the error.

Most probably it is due to broken chain of certificate.

https://support.sas.com/kb/66/182.html

[alexal]

Yes, App.tk.eam.ssl will provide more information about the problem in the SAS log. You can also test the connection to the SAS LASR Authorization service using CURL command (run it from the compute tier):

curl -v --cacert /<SASHome>/SASSecurityCertificateFramework/1.1/cacerts/trustedcerts.pem https://<MIDDLE_TIER_FQDN>:<PORT>/SASLASRAuthorization