cancel
Showing results for 
Search instead for 
Did you mean: 

Error facing when testing ADS rfc with SSL certificate.

former_member249929
Participant
0 Kudos

Dear Experts,

We are facing error in ADS RFC with SSL certificate.

Before adding the SSL certificate the rfc ADS is working properly, but after adding the SSL it throws error.

Created the SSL certificate from Strust and done everything as per this doc

This is the error Showing

ICM_HTTP_SSL_ERROR


Below are the icm logs dev_log.

[Thr 4896] Fri May 20 16:08:34 2016

[Thr 4896] *** ERROR during SecuSSL_SessionStart() from SSL_connnect()==SSL_ERROR_CONNECTION_LOST

[Thr 4896]    session uses PSE file "D:\usr\sap\BED\DVEBMGS00\sec\SAPSSLSOAP.pse"

[Thr 4896] No LastError / ErrorStack available!

[Thr 4896]   SSL_get_state()==0x2120 "SSLv3 read server hello A"

[Thr 4896]   SSL NI-hdl 339: local=192.168.30.62:49443  peer=192.168.30.61:50000

[Thr 4896] <<- ERROR: SapSSLSessionStart(sssl_hdl=000000000805EB30)==SSSLERR_SSL_CONNECT

[Thr 4896] *** ERROR => SSL handshake with BSSOLM:50000 failed: SSSLERR_SSL_CONNECT (-57)

[Thr 4896] SAPCRYPTO:SSL_connect() failed

[Thr 4896]

[Thr 4896] SapSSLSessionStart()==SSSLERR_SSL_CONNECT

[Thr 4896] SSL_connnect() failed  (0/0x00) Huh??

[Thr 4896]   SSL:SSL_get_state()==0x2120 "SSLv3 read server hello A"

[Thr 4896]   SSL NI-hdl 339: local=192.168.30.62:49443  peer=192.168.30.61:50000

[Thr 4896]   cli SSL session PSE "D:\usr\sap\BED\DVEBMGS00\sec\SAPSSLSOAP.pse"

[Thr 4896]   Target Hostname="BSSOLM"

Accepted Solutions (0)

Answers (2)

Answers (2)

former_member249929
Participant
0 Kudos

Dear experts,

This issue is not solved yet.

Did everything but still facing the same error.

I chose the port 50001 in RFC but gives an error called "Unknown Error".

When am choosing the port 50000 in RFC then only it gives an SSL handshake error.

Please give me a solution.

Thanks & Regards,

John

diego_santos
Active Participant
0 Kudos

Hi,

There seems to be a SSL handshake error, by the RFC error message.
ICM_HTTP_SSL_ERROR

Can you check our wiki to help troubleshoot?
https://wiki.scn.sap.com/wiki/x/NoeoFQ

I think the HTTPS service in ICM does not exist or it is not active.

Regards,
Diego Santos

former_member249929
Participant
0 Kudos

Hi,

Thanks for the valuable document, and i had tried with your document but when i tried, on importing certificate to ABAP it gives me an error.

former_member249929
Participant
0 Kudos

Hi ,

Please look at the services and port of mine, n please tell me whether its correct , a lil doubt .

ABAP

JAVA services

Java in visual admin

and the rfc is used by 50000 service no

diego_santos
Active Participant
0 Kudos

Hi,

The file extension is incorrect. Instead of .CERT, you must use .CER or .CRT.
This Wiki might help to convert the file.
https://wiki.scn.sap.com/wiki/x/qoz_Eg

Regards,

Diego

diego_santos
Active Participant
0 Kudos

Hi,

Here you need to use the HTTPS port from JAVA in the ADS RFC in ABAP.
There are 3 ports that might be used 50001, 50003 and 50006.

You need to call JAVA host name and one of these ports.

Make sure to assign the JAVA SSL certificate exported from ABAP server in one of these ports.

That means:

  1. export the certificate from ABAP;
  2. import the ABAP certificate to the JAVA server in VA;
  3. export the JAVA certificate from VA and import in ABAP STRUST Certificate List;

Regards,

Diego

former_member249929
Participant
0 Kudos

Hi,

tried everything now the certificate also added,

but still the error coming with rfc.