Enabled ADS server encryption - but fail to connect from ETA
Got the following error. ADS is using self-signed Cert. How can ETA by-pass the checking? Thanks
I am able to connect by using EMA JAVA with keystore file/password
Creating RSSL connection Host: localhost Port: 14002
rsslInitChannel() returned -1, Error </local/jenkins/workspace/TREP34XCore_Release/OS/OL7-64/esdk/source/esdk/Cpp-C/Eta/Impl/Transport/ripcsslutils.c:1033> Error: 2002 Certificate validation error. OpenSSL Return code: self signed certificate
Best Answer
-
Hi All,
Just resolved the issue I have on EMA CPP C112 window version.
Firstly, have to install the cert into the window OS. (certmgr/certlm)
Secondly, need to make sure that the lib/dll and the cert path are provided
\Users\kit\Documents\EMA>Cons112.exe -I EUR= -S ELEKTRON_DD -U radmin -C Consumer_3 -sslCAStore .\\kit1.cert.v2.crt -libsslName .\\libssl-1_1-x64.dll -libcryptoName .\\libcrypto-1_1-x64.dll
Issue resolved fianlly
1
Answers
-
Looking at the information you have provided - it looks like you are trying to connect to an ADS server running locally i.e. localhost:14002 ?
Also, I am not an expert on ADS configuration so not entirely sure what you mean by ADS Server encryption. However, I did find the following mentioned in the ADS 3.4.1 WhatsNew pdf file under 3.4.1 bug fixes:
Certificate checks when enabling encryption in 3.4.0 not allowing connection.
• TREP-2751
• Case 08372622
When enabling encryption on the route, the connection is failing in 3.4.0 reporting a certificate error indicating no subject name match in the host certificate's alternate name list. Reason for the failure is that the ADH always uses the IP address on the connection instead of the hostname. Previous workaround which is no longer needed is to include the host IP address in the alternate name list when generating
Therefore, if your issue is related to encryption on the route - then I recommend you check out ADS version 3.4.1 and upgrade if appropriate. If you continue to have issues, I suspect your best route would be to raise a ticket with the ADS help desk OR ask on the internal Realtime Delivery channel, Technical Interest group.
I would also recommend you refer to the ETA Quickstart here on our Developer Portal to ensure you are correctly setup and configured etc from an ETA point of view.
0 -
Hi Umer,
Thanks for replying. Actually, I fix the issue finally.
EMA JAVA - training sample code Con112 - working as expected without any issues on both Window and Linux Platform
EMA CPP - Linux - training sample code Con112 - if we would like to fix the encrypted connection, we have to add this into Con112
- Need to add a parameter config.sslCAStore to specify the cert from the ADS server
- Need to make sure that "Host" - have to put the same FQDN in the EmaConfig.xml and matched with the hostname stored in the "cert"
However, I still cannot solve the EMA CPP - WINDOW version. Window version of EMA CPP Con112 - have the same setting as Linux, Linux Con112 is working but not window Con112. Will continue to look into it.
0 -
Thanks for posting the solution!
0
Categories
- All Categories
- 6 AHS
- 37 Alpha
- 161 App Studio
- 4 Block Chain
- 4 Bot Platform
- 16 Connected Risk APIs
- 47 Data Fusion
- 30 Data Model Discovery
- 608 Datastream
- 1.3K DSS
- 577 Eikon COM
- 4.9K Eikon Data APIs
- 7 Electronic Trading
- Generic FIX
- 7 Local Bank Node API
- Trading API
- 2.7K Elektron
- 1.3K EMA
- 236 ETA
- 519 WebSocket API
- 33 FX Venues
- 10 FX Market Data
- 1 FX Post Trade
- 1 FX Trading - Matching
- 12 FX Trading – RFQ Maker
- 5 Intelligent Tagging
- 2 Legal One
- 20 Messenger Bot
- 2 Messenger Side by Side
- 9 ONESOURCE
- 7 Indirect Tax
- 59 Open Calais
- 264 Open PermID
- 39 Entity Search
- 2 Org ID
- PAM
- PAM - Logging
- 8.4K Private Comments
- 6 Product Insight
- Project Tracking
- ProView
- ProView Internal
- 20 RDMS
- 1.4K Refinitiv Data Platform
- 367 Refinitiv Data Platform Libraries
- 3 Refinitiv Due Diligence
- LSEG Due Diligence Portal API
- 3 Refinitiv Due Dilligence Centre
- Rose's Space
- 1.1K Screening
- 18 Qual-ID API
- 13 Screening Deployed
- 23 Screening Online
- 10 World-Check Customer Risk Screener
- 990 World-Check One
- 44 World-Check One Zero Footprint
- 45 Side by Side Integration API
- Test Space
- 3 Thomson One Smart
- 1.2K TR Internal
- Global Hackathon 2015
- 2 Specialists Who Code
- 10 TR Knowledge Graph
- 150 Transactions
- 142 REDI API
- 1.7K TREP APIs
- 4 CAT
- 21 DACS Station
- 117 Open DACS
- 1.1K RFA
- 103 UPA
- 172 TREP Infrastructure
- 224 TRKD
- 886 TRTH
- 5 Velocity Analytics
- 5 Wealth Management Web Services
- 59 Workspace SDK
- 9 Element Framework
- 5 Grid
- 13 World-Check Data File
- Yield Book Analytics
- 46 中文论坛