Page 1 of 1

Certificate problem with a Wittmann Robot

Posted: 06 Jan 2021, 13:51
by gcarrier
Hi,

I have the following error when I try to connect to my robot Wittmann R9:

BadCertificateChainIncomplete

Can I modify the Certificate or do I need to conctat Wittmann?

I was able to connect to an Arburg IMM.

Thanks.

Re: Certificate problem with a Wittmann Robot

Posted: 06 Jan 2021, 16:36
by Support Team
Hello,

the crutial question here is: does the Wittmann Robot have a CertificateChain or not?

a) If yes, the chain must be complete in order to be validated by the client (UaExpert).
b) If not, the application instance certificate of the Wittmann Robot is probably setting wrong parameters (in certificate usage flags, issuer information), and by this claim to have a certificate chain, but only having a simple leaf certificate.

In a) you must trust the chain (and the elements thereof), so that the intermediate issuers and the root are known and correctly trusted by the UaExpert.
In b) you need to contact Wittmann and ask for help to create correct application instance certificate for this robot (including correct setting of the certificate usage flags, and other parameters within the certificate).

NOTE: in UaExpert you can (temporarily) ignore errors in the certificate, just to get the connection going. However, on the long run, and for productive security configuration the certificates should be configured and used correctly.