SAP Knowledge Base Article - Preview

2464052 - "Could not open the connection to the URL" error when SSL connection is establishing

Symptom

You have configured a receiver channel which requires the connection to receiver service over SSL. You imported certificates to Keystore View and configured the necessary Keystore Entry for certificate authentication in channel's configuration. However, in the Channel Monitor tool you can see that channel has error and after executing channel ping it is shown "Could not open the connection to the URL <URL_of_destination_service>".

1.jpg

In system logs you can see the error "Error creating client SSL socket". After capturing XPI Inspector traces with Example 50 for affected channel you can see the following error entry:

Caused by: java.security.KeyStoreException: User <username> does not have permission com.sap.engine.services.keystore.impl.security.KeystoreEntryPermission with parameters
name keystore-view.entries.<name_of_keystore_view_you_use>
action READ_ENTRY
instance <name_of_your_certificate>


Read more...

Environment

  • PI Release Independent
  • SAP NetWeaver
  • SAP Process Integration

Product

SAP NetWeaver 7.1 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP enhancement package 1 for SAP NetWeaver 7.3

Keywords

TrustedCAs, SSL, certificate, java.security.KeyStoreException, KeystoreEntryPermission, READ_ENTRY, Process Integration 7.0, PI 7.0, PI 7.01, PI 7.02, Process Integration 7.10, PI 7.10, Process Integration 7.11, PI 7.11, Process Integration 7.30, PI 7.30, Process Integration 7.31, PI 7.31, Process Orchestration 7.40, PI 7.40, PO 7.40, Process Orchestration 7.50, PI 7.50, PO 7.50, NetWeaver, XI , KBA , BC-XI-CON-AFW-SEC , Security , BC-JAS-SEC , Security, User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.