rfc type g trggering ICM_HTTP_SSL_ERROR

[Former Member]

Dear all

  i have configures https  by downloading SAPCRYPTOLIB ,maintained strust,rz10,smicm service activated.but still am getting errot

ICM trace as follows:

[Thr 1744]    session uses PSE file "E:\usr\sap\DEV\DVEBMGS00\sec\SAPSSLC.pse"

[Thr 1744] SecudeSSL_SessionStart: SSL_connect() failed

[Thr 1744]   secude_error 4864 (0x00001300) = "ERROR recv(hdl=7856,buf=000000000056DF40,len=5)=-1, GetLastError()=10054 (0x00002746)

[Thr 1744] >>            Begin of Secude-SSL Errorstack            >>

[Thr 1744] ERROR in BIO_read: (4864/0x1300) ERROR recv(hdl=7856,buf=000000000056DF40,len=5)=-1, GetLastError()=10054 (0x00002746) #

[Thr 1744] ERROR in sock_read: (4864/0x1300) ERROR recv(hdl=7856,buf=000000000056DF40,len=5)=-1, GetLastError()=10054 (0x00002746) #

[Thr 1744] <<            End of Secude-SSL Errorstack

[Thr 1744]   SSL_get_state() returned 0x00002120 "SSLv3 read server hello A"

[Thr 1744]   SSL NI-sock: local=172.16.1.4:53192  peer=10.1.1.5:8080

[Thr 1744] <<- ERROR: SapSSLSessionStart(sssl_hdl=0000000002E18F70)==SSSLERR_SSL_CONNECT

sm59 i have filled proxy ,host,username password...etc..and      logon/security tab is active with default ssl client.

please help.

[Former Member · Accepted solution]

Hi Muhammed safel,

This error points to your peer (IP address 10.1.1.5, port 8080) and you need to check with your network team if there is something happening in your network. At some point, your client (IP address 172.16.1.4,Port 53192) is not being able to reach the target peer.

In addition, please check if the port 8080 that you're trying to reach is the HTTPS one (otherwise, no SSL handshake can happen). In that case, please double check the configuration in your application.

I hope this solves the issue .

Regards

Shrikant

[Former Member · Accepted solution]

my http port is 8080

https port is 8443 as displayed in smicm

am using proxy server.. where my ip 10.1.1.5 and port is 8080

''port 8080 that you're trying to reach is the HTTPS'' .https ports is 8443 how can i change?

[Former Member · Accepted solution]

thanks boss..our issue is resolved. our proxy was blocking the local server connection to ISS.

Internal connectivity problem...outbound allowed and started working.