2971250 - Fiori Launchpad In-Application help does not work

Fiori In-Application Help or SAP Companion does not work.

1.

The url for cp.hana.ondemand.com fails to retrieve xml output or the sample code:

https://<SAP Web dispatcher host>:< SAP Web dispatcher HTTPS port>/sap/dfa/help/odata.svc/?$format=json

The url for xray.hana.ondemand.com fails:

https://<SAP Web dispatcher host>:<SAP Web dispatcher HTTPS port>/resources/sap/dfa/help/sap/cfg/XrayBootstrapHelpConfig.json

2.

SSL handshake error between SAP Web dispatcher and cp.hana.ondemand.com and xray.hana.ondemand.com while establishing trust, SAP Web dispatcher Admin page shows below error:

and:

dev_webdisp trace under work directory shows below error:

[Thr 140532450203392] Tue Sep 15 07:28:42:091 2020
[Thr 140532450203392] SSL_get_state()==0x2120 "TLS read server hello A"
[Thr 140532450203392] *** ERROR during secussl_read() from SSL_read()==SSL_ERROR_SSL
[Thr 140532450203392] cli SSL session PSE "/usr/sap/<SID>/<instance>/sec/SAPSSLC.pse"
[Thr 140532450203392] session ciphersuites=HIGH:MEDIUM:+e3DES:!aNULL
[Thr 140532450203392] Client SSL_CTX 7fd03c1e7b20 pvflags=128 (TLSv1.0)
[Thr 140532450203392] secussl_read: SSL_read() failed (536875072/0x20001040)
[Thr 140532450203392] => "received a fatal TLS handshake failure alert message from the peer"
[Thr 140532450203392] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
..
[Thr 140532450203392] << ---------- End of Secu-SSL Errorstack ----------
[Thr 140532450203392] (No certificate request received from Server)
[Thr 140532450203392] Target Hostname="cp.hana.ondemand.com"
[Thr 140532450203392] SSL NI-hdl 186: local=<SAP Web dispatcher IP>:47012 peer=155.56.210.43:443
[Thr 140532450203392] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=7fd01c09ad30)==SSSLERR_SSL_READ
[Thr 140532450203392] *** ERROR => IcmConnPoolConnect: SapSSLSessionStartNB failed (-58): SSSLERR_SSL_READ [icxxpool.c 2792]

Level 2 dev_webdisp trace will show 503 error: (This is for xray.hana.ondemand.com, it will be same for cp.hana.ondemand.com)

Example:

[Thr 140277832763136] HTTP request (raw) [10/14218092/1]:
[Thr 140277832763136] GET /resources/sap/dfa/help/utils/adapters/fiori/Component-preload.js HTTP/1.1
.....
[Thr 140277832763136] CCL[SSL]: Cli-00227DF1: Error 0xA0600266(received a fatal TLS handshake failure alert message from the peer): received a fatal TLS handshake failure alert message from the peer
[Thr 140277832763136] CCL[SSL]: Cli-00227DF1: Error 0xA0600266:
[Thr 140277832763136] received a fatal TLS handshake failure alert message from the peer
[Thr 140277832763136] SSL3 client handshake failed
[Thr 140277832763136]
[Thr 140277832763136] SSL:SSL_read(netin= 7) handshake, processed= 7
[Thr 140277832763136] SSL_get_state()==0x2120 "TLS read server hello A"
[Thr 140277832763136] *** ERROR during secussl_read() from SSL_read()==SSL_ERROR_SSL
[Thr 140277832763136] cli SSL session PSE "/usr/sap/<SID>/<instance>/sec/SAPSSLC.pse"
[Thr 140277832763136] session ciphersuites=144:HIGH:!eRC4:!eNULL:!aNULL:!mMD5
[Thr 140277832763136] Client SSL_CTX 7f94dc0157b0 pvflags=128 (TLSv1.0)
[Thr 140277832763136] secussl_read: SSL_read() failed (536875072/0x20001040)
[Thr 140277832763136] => "received a fatal TLS handshake failure alert message from the peer"
[Thr 140277832763136] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
[Thr 140277832763136] 0x20001040 | SAPCRYPTOLIB | SSL_read
[Thr 140277832763136] SSL API error
[Thr 140277832763136] received a fatal TLS handshake failure alert message from the peer
[Thr 140277832763136] 0xa0600266 | SSL | ssl3_read_bytes
[Thr 140277832763136] received a fatal TLS handshake failure alert message from the peer
[Thr 140277832763136] 0xa0600266 | SSL | ssl3_connect
[Thr 140277832763136] received a fatal TLS handshake failure alert message from the peer
[Thr 140277832763136] 0xa0600266 | SSL | ssl3_read_bytes
[Thr 140277832763136] received a fatal TLS handshake failure alert message from the peer
[Thr 140277832763136] << ---------- End of Secu-SSL Errorstack ----------
[Thr 140277832763136] (No certificate request received from Server)
[Thr 140277832763136] Target Hostname="xray.hana.ondemand.com"
[Thr 140277832763136] SSL NI-hdl 464: local=<SAP Web dispatcher IP>:40403 peer=<PROXY IP address>:<some random port>
[Thr 140277832763136] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=7f94daa8ee80)==SSSLERR_SSL_READ
[Thr 140277832763136] <<- SapSSLErrorName()==SSSLERR_SSL_READ
[Thr 140277832763136] *** ERROR => IcmConnPoolConnect: SapSSLSessionStartNB failed (-58): SSSLERR_SSL_READ [icxxpool.c 2792]
.....
[Thr 140277832763136] HTTP response (raw) [10/14218092/1]:
[Thr 140277832763136] HTTP/1.0 503 Service Unavailable

As a result on Fiori launchpad,? help button is not displayed.

• SAP Web dispatcher
• Fiori

in-help, fiori, web assistant, search, Questionmark,In-Application Help, 503 , KBA , BC-CST-WDP , Web Dispatcher , KM-SEN-CMP , SAP Companion former known as Web Assistant , Problem