Symptom
You have configured a receiver channel which requires the connection to receiver service over SSL. You imported certificates to Keystore View and configured the necessary Keystore Entry for certificate authentication in channel's configuration. However, in the Channel Monitor tool you can see that channel has error and after executing channel ping it is shown "Could not open the connection to the URL <URL_of_destination_service>".
In system logs you can see the error "Error creating client SSL socket". After capturing XPI Inspector traces with Example 50 for affected channel you can see the following error entry:
Caused by: java.security.KeyStoreException: User <username> does not have permission com.sap.engine.services.keystore.impl.security.KeystoreEntryPermission with parameters
name keystore-view.entries.<name_of_keystore_view_you_use>
action READ_ENTRY
instance <name_of_your_certificate>
Read more...
Environment
- PI Release Independent
- SAP NetWeaver
- SAP Process Integration
Product
Keywords
TrustedCAs, SSL, certificate, java.security.KeyStoreException, KeystoreEntryPermission, READ_ENTRY, Process Integration 7.0, PI 7.0, PI 7.01, PI 7.02, Process Integration 7.10, PI 7.10, Process Integration 7.11, PI 7.11, Process Integration 7.30, PI 7.30, Process Integration 7.31, PI 7.31, Process Orchestration 7.40, PI 7.40, PO 7.40, Process Orchestration 7.50, PI 7.50, PO 7.50, NetWeaver, XI , KBA , BC-XI-CON-AFW-SEC , Security , BC-JAS-SEC , Security, User Management , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.