Symptom
Using SAP PI/PO for REST receiver adapter or SOAP adapter, it was observed the message processing fails with SSL-related errors. In Communication Channel Monitoring, the system throws the following message:
“Message processing failed. Cause: com.sap.aii.adapter.rest.ejb.security.SSLException: SSL-enabled call failed. Error while configuring SSL client. Error retrieving certificates.”
DefaultTrace logs show exceptions similar to:
15:34:00:371 ~nnel.Error retrieving certificates: Catching java.security.GeneralSecurityException: Error retrieving certificates:
at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.generateSSLContentxt(IAIKSocketFactory.java:156)
at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.<init>(IAIKSocketFactory.java:48)
at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.initalizeSSLfactory(RESTReceiverChannel.java:228)
at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.getSecureSocketFactory(RESTReceiverChannel.java:213)...
...at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:302)
Caused by: java.lang.IllegalArgumentException: Error loading config file: java.lang.Throwable: Cannot read config file "/usr/sap/<SID>/SYS/global/security/lib/tools/SSLContext.properties"!
at iaik.security.ssl.SSLContext.<init>(SourceFile:725)
Read more...
Environment
- SAP NetWeaver
- SAP Process Integration
Product
Keywords
SSL error, SSLContext.properties, REST Receiver Adapter, SAP PI, SAP PO, Error retrieving certificates, SSL configuration, IAIKSocketFactory, SNI issue, SSL client initialization failure, SAP PI REST adapter SSL, SAP PO REST SSL error; , KBA , BC-XI-CON-AFW-SEC , Security , BC-JAS-SEC-CPG , Cryptography , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview