SAP Knowledge Base Article - Preview

2616423 - SSL does not work between PI and Remote System - SSLException: Peer sent alert: Alert Fatal: handshake failure

Symptom

SSL connection does not work between PI and a remote system. Customer received the following error:

In default_trace file:

java.lang.RuntimeException: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
at com.sap.aii.adapter.rest.ejb.poller.RESTPollerChannel.channel_poll(RESTPollerChannel.java:242)
at com.sap.aii.adapter.rest.ejb.common.channel.AbstractPollingChannel.poll(AbstractPollingChannel.java:70)
at com.sap.aii.adapter.rest.ejb.common.channel.AbstractPollingChannel.invoke(AbstractPollingChannel.java:52)
at com.sap.aii.af.lib.scheduler.JobBroker$Worker.run(JobBroker.java:529)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:185)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:302)
Caused by: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure

From XPI Inspector Example 50 --> XI Channels --> Verify Remote SSL Server Certificate:

08:30:26:885 Guest SAP_AFScheduler.Worker ~rest.ejb.security.IAIKSocketFactory ssl_debug(118): Starting handshake (iSaSiLk 5.104)…
08:30:26:887 Guest SAP_AFScheduler.Worker ~rest.ejb.security.IAIKSocketFactory ssl_debug(118): Sending v3 client_hello message to test.example.it:443, requesting version 3.3...
08:30:26:890 Guest SAP_AFScheduler.Worker ~rest.ejb.security.IAIKSocketFactory ssl_debug(118): Sending extensions: renegotiation_info (65281), signature_algorithms (13)
08:30:26:962 Guest SAP_AFScheduler.Worker ~rest.ejb.security.IAIKSocketFactory ssl_debug(118): Received alert message: Alert Fatal: handshake failure
08:30:26:963 Guest SAP_AFScheduler.Worker ~rest.ejb.security.IAIKSocketFactory ssl_debug(118): SSLException while handshaking: Peer sent alert: Alert Fatal: handshake failure
08:30:26:964 Guest ~rest.ejb.security.IAIKSocketFactory ssl_debug(118): Shutting down SSL layer...
08:30:26:979 Guest SAP_AFScheduler.Worker ~t.ejb.poller.RESTPollerChannel.poll Catching iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
at iaik.security.ssl.y.f(SourceFile:414)
at iaik.security.ssl.n.b(SourceFile:730)


Read more...

Environment

  • SAP NetWeaver Application Server Java - all versions
  • SAP Process Integration - all versions

Product

SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions ; SAP Process Integration all versions

Keywords

SSL, SSL configuration, secure socket layers, TLS, transport layer security, TLS protocol, cipher suites, handshake failure, alert fatal, SSLException, peer sent alert, version 3.3, PI system, process integration, Netweaver Java, 443 port, ssl test, ssllabs, IOException, SSLHandshakeException, SocketException, Connection closed by remote host , KBA , BC-JAS-SEC-CPG , Cryptography , BC-XI-CON-AFW-SEC , Security , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.