SSL handshake failed with eDirectory Driver

Errors:

RSA_NICI_PUBLIC_ENCRYPT

error:14098077 14098077 -14098077

SSL_ERROR_SYSCALL

RSA_NICI_PUBLIC_ENCRYPT

SSL handshake failed

After creating certificates with the eDirectory to eDirectory driver using the NDS-to-NDS Driver Certificates wizard the following error messages were received.

SUBSCRIBER SIDE

PUBLISHER SIDE

Removing the Certificate from the Authentication field (leaving it blank) on the properties for both drivers allowed the driver to start and then sync, however "Missing decryption key for sensitive data" errors were received during synchronization because the SSL Certificates were not being used. This tells us there is was communication between the servers. The "Missing decryption key for sensitive data" errors are normal when not using Certificates.

1. Make sure you are running the current and same eDirectory version on both eDirectory servers running the drivers in both trees (this is not required by IDM, but facilitate troubleshooting since it allows next step).

2. Make sure you are running the current NICI version on both servers (again, IDM supports different versions of NICI on both sides, but since testing is more intensive on the latest versions, this troubleshooting step might be necessary). That is currently found in the Security Services update.
3. Try re-running the NDS-to-NDS Driver Certificates wizard.

If that still fails, here are Three additional options:

1. Launch iManager from the other eDirectory server in the other tree you are synching, then run the NDS-to-NDS Driver Certificates wizard from the other tree.

2. Create the Certificates using Designer for Identity Manager.

3. Create the Certificates Manually with ConsoleOne or iManager. This process is documented in the Novell Documentation for the eDirectory Driver or in KB 3578820 - Manually creatting NDS-toNDS eDirectory Driver Certificates with ConsoleOne.