GlobalSign login attempt failed toDerInputStream rejects tag type 45

Issue

After you configured the configuration for GlobalSign Integration ( GlobalSignDigitalSigningHandler ) in SignDoc, the Status Information shows following error:

GlobalSign login attempt failed: toDerInputStream rejects tag type 45

Cause

SignDoc cannot establish a TLS connection to the GlobalSign DSS API because there is an issue with and dedicated to the mTLS Certificate configuration.

Solution

The mTLS certificate needs to be a PKCS12 container (pfx file).
Importing the PEM encoded certificate (as available per "Copy to Clipboard" option in Atlas Portal) doesn´t work and will cause exactly this error: toDerInputStream rejects tag type 45

Please check knowledgebase article....

How to create a GlobalSign mTLS Certificate for SignDoc

....and use it as guide to create a new mTLS Certificate for connection to GlobalSign DSS API.

Level of Complexity 

Moderate

Applies to  

References

Add any references to other internal or external articles