HTTPS errors

This topic lists the most common HTTPS errors and how you can resolve them.

Table 1. Errors using HTTP and HTTPS
Error type Browser error Resolution
License error Application or service has been stopped due to fatal error Check your GAS environment, and run the fglWrt/greWrt/grxWrt -a info to ensure your license is valid.

See OIDC service errors for the log file message associated with this error.
Access forbidden HTTP Error 403 See the ACCESS_CONTROL GAS configuration element.
Certificate issuer errors The browser shows the Genero OpenIDConnect Error page.
The message:
  • Invalid configuration parameters. (The certificate issuer is unknown.)
  • Protocol error. (The certificate is not in your CA list.)
 A certificate authority (CA) to verify the certificate is missing. Contact the certificate issuer and ask them to provide the CA certificate.
Important:

If CA certificates are stored in $FGLDIR/web_utilities/certs directory, ensure they are named with the .crt extension.

Other alternatives for CA configuration:
  • You can configure the CA using fglprofile entries.
  • On Windows® or macOS™, you can import the CA into the operating system keystore.
See the Certificates in practice section in the Genero Business Development Language User Guide.
Permissions error The browser shows the Genero OpenIDConnect Error page.
The message:
  • Invalid configuration parameters.
 This error is triggered when the user does not have write permissions on $FGLDIR\web_utilities\services\openid-connect directory.

See OIDC service errors for the log file message associated with this error.