Error: 'Caused by: java.security.cert.CertificateException: KeyUsage does not allow key encipherment at com.rsa.sslj.x.ck.checkServerTrusted(Unknown Source) at com.rsa.sslj.x.aD.a(Unknown Source)' appears in imsTrace.log file. The above message appears in
2 years ago
Originally Published: 2014-10-01
Article Number
000048479
Applies To
RSA Authentication Manager 8.1
Issue
Error: "Caused by: java.security.cert.CertificateException: KeyUsage does not allow key encipherment
at com.rsa.sslj.x.ck.checkServerTrusted(Unknown Source)
at com.rsa.sslj.x.aD.a(Unknown Source)" appears in imsTrace.log file. The above message appears in imsTrace.log file.
Cannot connect to AD Identity source using ldaps in AM 8.1
Connection to Identity Source using ldaps fails with an error: " "

Server/logs/imsTrace.log file has below lines:

2014-09-23 16:26:14,367, [[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'], (LDAPConnectionTesterImpl.java:231), trace.com.rsa.ims.ldapslotmgt.impl.LDAPConnectionTesterImpl, ERROR, AM.alab.local,,,,LDAP Server connection test failed
javax.naming.CommunicationException: ad.alab.local:636 [Root exception is javax.net.ssl.SSLException: Certificate not verified.]