2748696 - 500 Native SSL error when executing REST service

You have created a REST web service in the SAP Cloud Applications Studio. After checking in the UI, you can see the 'Check Connection' function in the Communication Arrangement is failing. You now debug the execution of this service in the Cloud Applications Studio and can see the error 500 Native SSL error is returned.

Image/Data is from SAP internal systems, sample data, or demo systems.  Any resemblance to real data is purely coincidental.

• SAP Cloud Applications Studio
• SAP Business ByDesign
• SAP Cloud for Customer

1. Log into the Cloud Solution.
2. Go to the Administrator (or Application and User Management) work centre.
3. Go to the Communication Arrangement view and open the affected arrangement.
4. Click on Edit - >  On the Technical settings.
5. Enter Advanced Settings mode.
6. Use the actions Check Connection and Check Service.
7. Observe the error messages raised.

Errors:

• Ping failed.
• Checking connection failed.

 

Now you must debug this scenario in the Cloud Applications Studio by activating debugging and triggering the web service in the UI. You will then see the response variable with the 500 Native SSL error.

This issue is usually raised because of missing or insufficient authentication. You have not added the service's trusted certificate to the Cloud Solution.

You must download the certificate from the called HTTPS page and upload it in SAP Cloud Solution under the list of trustworthy certificates in the Administrator (or Application and User Management) work centre. Please kindly make sure "Chain Incomplete" is not marked for your uploaded certificate. If it's marked, please kindly refer to the case documentation in "See Also" section.

Please follow the below steps in order to upload the certificate.

• There are two tasks required to install the Certificate:
1. Extract. 
2. Upload.

• To extract the certificate you need to:

1. Open the API URL on the browser. We will use Google Chrome and the SAP standard API -  https://sapseod.mindtouch.us/, as an example. You need to use your URL API then.
2. Once it is opened, you need to click the locker icon, like the screen below.

3. Then, the below screen will open. Click Certificate (Valid) to open the certificate.

4. Once you click on Certificate, the Certificate popup is opened. You need to click on Certification Path tab, then double-click the first level, then click onDetails tab and then on Copy to File... button and Next.

5. On the Certificate Export Wizard, select the Base-64 encoded X.509 (.CER).

6. Save the file on your computer. It is advised to use the same name as the Certificate, to avoid confusion.

Important: you will need to do this for all Certificate levels.

• To install the certificate on the SAP Cloud Solution:
  

1. Go to the Administrator or Application and User Management work center.
2. Select the Common Tasks view.
3. Click Edit Certificate Trust List.
4. Click Upload.
5. Click Browse and select the files you saved on the previous steps. (You will need to do it separately for each file, but the order is not important).
6. Click Save.

 KBA 2049823 - Certificate Trust List Chain Incomplete

REST, WS, Web, Service, SSL, Error, 500, SDK, PDI, HTTP, code, authentication, method, outbound, call, HTTP error while receiving response , KBA , ssl , rest , AP-RC-BDS-WS , ByDesign Studio Web Services , How To

SAP Business ByDesign all versions ; SAP Cloud Applications Studio all versions ; SAP Cloud for Customer add-ins all versions ; SAP Cloud for Customer core applications all versions