Discover Refinitiv
MyRefinitiv Refinitiv Perspectives Careers
Created with Sketch.
All APIs Questions & Answers  Register |  Login
Ask a question
  • Questions
  • Tags
  • Badges
  • Unanswered
Search:
  • Home /
  • Elektron /
  • EMA /
avatar image
REFINITIV
Question by Frederic · Oct 26, 2021 at 02:10 PM · c++centosdockeropenssl

Error 2002 Certificate validation error. self signed certificate in certificate chain

EMA C++ 2.0.3 on Centos 8 (docker)

Run the consumer example 450, got error below:

Error Location /local/jenkins/workspace/ESDKCore_RCDEV/OS/RH8-64/rcdev/source/rtsdk/Cpp-C/Eta/Impl/Reactor/rsslReactorWorker.c:1241

Error Text </local/jenkins/workspace/ESDKCore_RCDEV/OS/RH8-64/rcdev/source/rtsdk/Cpp-C/Eta/Impl/Transport/ripcsslutils.c:1037> Error: 2002 Certificate validation error. OpenSSL Return code: self signed certificate in certificate chain

Tried the command line: openssl s_client -showcerts -connect amer-3-t1.streaming-pricing-api.refinitiv.com:14002 , then got the output: cert_output.txt

Nothing special, and I also checked the thread below if any idea,

https://community.developers.refinitiv.com/questions/66332/enabled-ads-server-encryption-but-fail-to-connect.html

Could you please advise me? Thanks.

cert-output.txt (11.2 KiB)

People who like this

0 Show 0
Comment
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

2 Replies

  • Sort: 
avatar image
REFINITIV
Best Answer
Answer by umer.nalla · Oct 26, 2021 at 02:42 PM

Hi @Frederic

If it is a customer issue, then it could be OpenSSL library issue OR they are trying to connect from behind a Proxy.

If a Proxy, then the client should speak to their internal network security - who can also raise a ticket with the RTO team via My.Refinitiv - they can help with Proxy connectivity type queries.


Comment

People who like this

0 Show 0 · Share
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

avatar image
REFINITIV
Answer by umer.nalla · Oct 26, 2021 at 02:29 PM

Hi @Frederic

Has this started occurring recently? Was it working fine previously?

If so, was the new ZScaler security tool installed on your PC by Refinitiv Security?

One of my colleagues whose PC was updated with ZScaler can no longer connect to Real-Time Optimised either.

Zscaler information page and FAQs

If so, Raise a ticket for the Zscaler team.. Request to whitelist Domain / URL - Service Portal (service-now.com)


If the above is not the case and/or you are asking on behalf of a customer -

  • it could be the customer is connecting through a Proxy
  • OR your OpenSSL libraries on your Centos build are out of date perhaps?
Comment

People who like this

0 Show 1 · Share
10 |1500 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

avatar image
REFINITIV
Frederic · Oct 26, 2021 at 02:34 PM 0
Share

Thanks @umer.nalla . The customer found the issue described above first running on his CentOS docker, I have also asked him to check again after running yum reinstall -y ca-certificates, waiting his response.

Watch this question

Add to watch list
Add to your watch list to receive emailed updates for this question. Too many emails? Change your settings >
9 People are following this question.

Related Questions

rssl initialise failed Error while running the Example .

RTO AWS PrivateLink with EKS container, initialization timeout

Error: 0012 Unable to load openSSL Libraries

Contribute more than a RIC via EMA C++ (RCC)

configure channel set using programmatically

  • Copyright
  • Cookie Policy
  • Privacy Statement
  • Terms of Use
  • Anonymous
  • Sign in
  • Create
  • Ask a question
  • Spaces
  • Alpha
  • App Studio
  • Block Chain
  • Bot Platform
  • Connected Risk APIs
  • DSS
  • Data Fusion
  • Data Model Discovery
  • Datastream
  • Eikon COM
  • Eikon Data APIs
  • Electronic Trading
    • Generic FIX
    • Local Bank Node API
    • Trading API
  • Elektron
    • EMA
    • ETA
    • WebSocket API
  • Intelligent Tagging
  • Legal One
  • Messenger Bot
  • Messenger Side by Side
  • ONESOURCE
    • Indirect Tax
  • Open Calais
  • Open PermID
    • Entity Search
  • Org ID
  • PAM
    • PAM - Logging
  • ProView
  • ProView Internal
  • Product Insight
  • Project Tracking
  • RDMS
  • Refinitiv Data Platform
    • Refinitiv Data Platform Libraries
  • Rose's Space
  • Screening
    • Qual-ID API
    • Screening Deployed
    • Screening Online
    • World-Check One
    • World-Check One Zero Footprint
  • Side by Side Integration API
  • TR Knowledge Graph
  • TREP APIs
    • CAT
    • DACS Station
    • Open DACS
    • RFA
    • UPA
  • TREP Infrastructure
  • TRKD
  • TRTH
  • Thomson One Smart
  • Transactions
    • REDI API
  • Velocity Analytics
  • Wealth Management Web Services
  • Workspace SDK
    • Element Framework
    • Grid
  • World-Check Data File
  • 中文论坛
  • Explore
  • Tags
  • Questions
  • Badges