SAP Knowledge Base Article - Preview

2461900 - SSSLERR_PEER_CERT_UNTRUSTED error in dev_icm or dev_webdisp trace

Symptom

With the local system acting as the client, the TLS handshake fails with the destination server. The following error (or similar) is recorded in the ICM trace (dev_icm) or the SAP Web Dispatcher trace (dev_webdisp):

[Thr <thr_no>] The peer's X.509 Certificate (chain) is untrusted
[Thr <thr_no>] SapSSLSessionStartNB()==SSSLERR_PEER_CERT_UNTRUSTED
[Thr <thr_no>] SSL:SSL_read() failed (536872221/0x2000051d)
[Thr <thr_no>] => "Failed to verify peer certificate. Peer not trusted."
[Thr <thr_no>] SSL:SSL_get_state()==0x2131 "TLS read server certificate B"
[Thr <thr_no>] SSL NI-hdl 89: local=<host:port> peer=<host:port>
[Thr <thr_no>] cli SSL session PSE "X:\usr\sap\<sid>\<inst>\sec\<SAP_PSE>.pse"
[Thr <thr_no>] Target Hostname="<hostname>"

Where <SAP_PSE> can be any PSE. For example:

  • Anonymous: SAPSSLA
  • Standard: SAPSSLC
  • Server: SAPSSLS
  • Individual: SAPSSL<name>


Read more...

Environment

  • SAP NetWeaver ABAP Application Server
  • SAP Web Dispatcher
  • ABAP Platform based product

Product

ABAP platform all versions ; SAP NetWeaver all versions ; SAP Web Dispatcher all versions

Keywords

The peer's X.509 Certificate (chain) is untrusted, Failed to verify peer certificate, Peer not trusted, RFC, LMDB_SYNCDEST, STRUST, PSE, Trusted certificate, Chain, ICM, Peers, Peer certificate (chain) is not trusted, issue in SSL, dev_icm, SSSLERR_PEER_CERT_UNTRUSTED, ICM_HTTP_SSL_PEER_CERT_UNTRUSTED, Fiori, My Inbox, Gateway, upgrade, Portal, LDAPS. 636, Native SSL Error, 500 SSL Peer Certificate Untrusted, SSL handshake with , KBA , BC-CST-IC , Internet Communication Manager , BC-CST-WDP , Web Dispatcher , BC-SEC-SSL , Secure Sockets Layer Protocol , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.