3007243 - Error retrieving certificates after changing SSLContext.properties file

• You have configured a REST Receiver Adapter integration in SAP Process Integration (PI) or SAP Process Orchestration (PO)
• As part of this integration, it was necessary to make amendments to the SSLContext.properties file e.g. for Server Name Indication (SNI) or other such requirements as per SAP Note 2284059 Update of SSL library within NW Java server
• When testing the integration, the error below is thrown in Communication Channel Monitoring
  Message processing failed. Cause: com.sap.aii.adapter.rest.ejb.security.SSLException: SSL-enabled call failed. Error while configuring SSL client Error retrieving certificates:
  Error while processing outbound message. SSL-enabled call failed. Error while configuring SSL client Error retrieving certificates:
• Checking the XPI Inspector trace and/or the defaultTrace entries similar to below can be seen:
  Error retrieving certificates

  15:34:00:371   ~nnel.Error retrieving certificates: Catching java.security.GeneralSecurityException: Error retrieving certificates:
  at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.generateSSLContentxt(IAIKSocketFactory.java:156)
  at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.<init>(IAIKSocketFactory.java:48)
  at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.initalizeSSLfactory(RESTReceiverChannel.java:228)
  at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.getSecureSocketFactory(RESTReceiverChannel.java:213)...
  ...at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:302)
  Caused by: java.lang.IllegalArgumentException: Error loading config file: java.lang.Throwable: Cannot read config file "/usr/sap/<SID>/SYS/global/security/lib/tools/SSLContext.properties"!
  at iaik.security.ssl.SSLContext.<init>(SourceFile:725)

• SAP NetWeaver
• SAP Process Integration

Process Integration, PI, Process Orchestration, PO, NetWeaver, XI, AEX, REST Adapter, TLS 1.2 , KBA , BC-XI-CON-RST , Rest Adapter , BC-JAS-SEC-CPG , Cryptography , BC-XI-CON-AFW-SEC , Security , Problem