Skip to main content

Error: SSLPeerUnverifiedException: peer not authenticated

The OS does not trust the server certificate, which can be due to multiple reasons.

Written by Petr Pech

In general, the solution may be a complete reinstallation of Java. Since the program now includes Java in its installation package, you need to uninstall and reinstall the application (download here).

Disabling SIP may also help. (Session Initiation Protocol)

If you are using Flexi in the cloud, installing the client package of the same version as your Flexi application may resolve the issue.

Fedora 28

On Fedora, the following certificates are disabled for Java by default
jdk.certpath.disabledAlgorithms=MD2, MD5, DSA, RSA keySize < 2048

On this line, the number 2048 needs to be replaced with 1024 (in the file /etc/crypto-policies/back-ends/java.config)
After making this change, Flexi will start up correctly.

Fedora 34, openSUSE Tumbleweed, openSUSE 15.4

Fedora 34 and openSUSE Tumbleweed are not yet officially supported operating systems. The verified solution is to edit the following line in the file /etc/crypto-policies/back-ends/java.config:
jdk.certpath.disabledAlgorithms=MD2, SHA1, MD5, DSA, RSA keySize < 2048

Remove the SHA1 certificate.

The resulting line should look as follows:
jdk.certpath.disabledAlgorithms=MD2, MD5, DSA, RSA keySize < 2048

For openSUSE Tumbleweed, the issue was also resolved by reinstalling Java to version 1_8_0-1.8.162-30 (from the polyconvex repository).

Fedora 38

sudo update-crypto-policies --set LEGACY

CentOS 6

This issue has also been observed with a Let's Encrypt certificate on CentOS 6. Solution:

1. Log in to PostgreSQL and delete the cscert table in centralServer

2. Restart Flexi — it will generate its own self-signed certificate

3. Upload the correct certificate

Did this answer your question?