-1227 0xFFFFFB35   PKI E BROKEN CHAIN

Source:  Novell Certificate Server

Explanation:  The certificate chain being stored in a Server Certificate object is invalid.

The certificate being stored in a Server Certificate object cannot be validated using the certificate chain that is being stored in the Server Certificate object or that has already been stored in the Server Certificate object.

The certificate chain stored in a Server Certificate object is invalid or corrupted.

Possible Cause:  The certificate was generated by an external Certificate Authority. When the server certificate was imported, the option to import a trusted root certificate was skipped.

Action:  Perform the following operations:

• Contact the Certificate Authority that issued the server certificate to obtain the Certificate Authority's certificate.
• Using ConsoleOne, view the Server Certificate object. Click Import.
• Import the Certificate Authority's certificate as the trusted root.
• Import the server's certificate as the object certificate.

Possible Cause:  The certificate was generated by an external Certificate Authority. When the server certificate was imported, the server certificate was imported before the trusted root certificate.

Action:  Perform the following operations:

• Using ConsoleOne, view the Server Certificate object. Click Import.
• Import the Certificate Authority's certificate as the trusted root.
• Import the server's certificate as the object certificate.

Possible Cause:  The certificate obtained from the Certificate Authority is invalid.

Action:  Contact the Certificate Authority.

Possible Cause:  An error occurred during the creation of the server certificate.

Action:  Delete the Server Certificate object and retry the operation.

Possible Cause:  The Server Certificate object has been corrupted.

Action:  Complete one or more of the following solutions in the order listed until the error is resolved:

• Restore the eDirectory or NDS partition that the corrupted Server Certificate object resides in from backup.
• Delete the Server Certificate object and create a new one.

Possible Cause:  An internal error occurred.

Action:  Complete one or more of the following solutions in the order listed until the error is resolved:

• Exit and restart ConsoleOne.
• Unload and reload pki.nlm.
• Upgrade to the latest version of Novell Certificate Server. See Upgrading the Version of Novell Certificate Server.