SAP Knowledge Base Article - Preview

3007243 - Error retrieving certificates after changing SSLContext.properties file

Symptom

Using SAP PI/PO for REST receiver adapter or SOAP adapter, it was observed the message processing fails with SSL-related errors. In Communication Channel Monitoring, the system throws the following message:

“Message processing failed. Cause: com.sap.aii.adapter.rest.ejb.security.SSLException: SSL-enabled call failed. Error while configuring SSL client. Error retrieving certificates.”

DefaultTrace logs show exceptions similar to:

15:34:00:371   ~nnel.Error retrieving certificates: Catching java.security.GeneralSecurityException: Error retrieving certificates:
at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.generateSSLContentxt(IAIKSocketFactory.java:156)
at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.<init>(IAIKSocketFactory.java:48)
at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.initalizeSSLfactory(RESTReceiverChannel.java:228)
at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.getSecureSocketFactory(RESTReceiverChannel.java:213)...
...at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:302)
Caused by: java.lang.IllegalArgumentException: Error loading config file: java.lang.Throwable: Cannot read config file "/usr/sap/<SID>/SYS/global/security/lib/tools/SSLContext.properties"!
at iaik.security.ssl.SSLContext.<init>(SourceFile:725)


Read more...

Environment

  • SAP NetWeaver
  • SAP Process Integration

Product

SAP NetWeaver all versions ; SAP Process Integration all versions

Keywords

SSL error, SSLContext.properties, REST Receiver Adapter, SAP PI, SAP PO, Error retrieving certificates, SSL configuration, IAIKSocketFactory, SNI issue, SSL client initialization failure, SAP PI REST adapter SSL, SAP PO REST SSL error; , KBA , BC-XI-CON-AFW-SEC , Security , BC-JAS-SEC-CPG , Cryptography , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.