-1227 FFFFFB35 PKI E BROKEN CHAIN

Source

Novell® Certificate Server

Explanation

The certificate chain being stored in a Server Certificate object is invalid.

The certificate being stored in a Server Certificate object cannot be validated using the certificate chain that is being stored in the Server Certificate object or that has already been stored in the Server Certificate object.

The certificate chain stored in a Server Certificate object is invalid or corrupted.

Possible Cause

The certificate was generated by an external Certificate Authority. When the server certificate was imported, the option to import a trusted root certificate was skipped.

Action

Perform the following operations:

- Contact the Certificate Authority that issued the server certificate to obtain the Certificate Authority's certificate.
- Using ConsoleOne®, view the Server Certificate object. Click Import.
- Import the Certificate Authority's certificate as the trusted root.
- Import the server's certificate as the object certificate.

Possible Cause

The certificate was generated by an external Certificate Authority. When the server certificate was imported, the server certificate was imported before the trusted root certificate.

Action

Perform the following operations:

- Using ConsoleOne, view the Server Certificate object. Click Import.
- Import the Certificate Authority's certificate as the trusted root.
- Import the server's certificate as the object certificate.

Possible Cause

The certificate obtained from the Certificate Authority is invalid.

Action

Contact the Certificate Authority.

Possible Cause

An error occurred during the creation of the server certificate.

Action

Delete the Server Certificate object and retry the operation.

Possible Cause

The Server Certificate object has been corrupted.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Restore the NDS® or Novell eDirectory™ partition that the corrupted Server Certificate object resides in from backup
- Delete the Server Certificate object and create a new one.

Possible Cause

An internal error occurred.

Action

Complete one or more of the following solutions in the order listed until the error is resolved:

- Exit and restart ConsoleOne.
- Unload and reload PKI.NLM.
- Upgrade to the latest version of Novell Certificate Server.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. For information on trademarks, see Legal Notices.