SAP Knowledge Base Article - Preview

3068848 - SSL Handshake Issues at Desktop Startup

Symptom

After upgrading SAP Convergent Mediation server and JDK version, the desktop client could not connect to the platform container.  The following stacktrace error shows in the platform runtime log file: 

Jun 8 09:31:59: WARNING: SSL setup failed
Jun 8 09:31:59: Failed to create SSL Bundle
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportClient.startSSL(DRRCPTCPDataTransportClient.java:867)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportClient.perhapsStartSSL(DRRCPTCPDataTransportClient.java:766)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportClient.addUnidirectionalConnection(DRRCPTCPDataTransportClient.java:395)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.handleHandshakeWithAddress(DRRCPTCPDataTransportServer.java:502)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.handleHandshake(DRRCPTCPDataTransportServer.java:1575)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.extractAndHandleHeader(DRRCPTCPDataTransportServer.java:1562)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.extractHandshakeIfCompleteHeaderRead(DRRCPTCPDataTransportServer.java:1549)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.doSocketRead(DRRCPTCPDataTransportServer.java:1014)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.doSocketIO(DRRCPTCPDataTransportServer.java:939)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.actOnSelectedKeys(DRRCPTCPDataTransportServer.java:897)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportServer.run(DRRCPTCPDataTransportServer.java:247)
Jun 8 09:31:59:  at java.lang.Thread.run(Thread.java:748)
Jun 8 09:31:59: Caused by: Couldn't initiate SSL handshake
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPSSLUtils.createSSLEngine(DRRCPSSLUtils.java:205)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPSSLBundle.<init>(DRRCPSSLBundle.java:29)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPTCPDataTransportClient.startSSL(DRRCPTCPDataTransportClient.java:864)
Jun 8 09:31:59:  ... 11 more
Jun 8 09:31:59: Caused by: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)
Jun 8 09:31:59:  at sun.security.ssl.HandshakeContext.<init>(HandshakeContext.java:171)
Jun 8 09:31:59:  at sun.security.ssl.ServerHandshakeContext.<init>(ServerHandshakeContext.java:62)
Jun 8 09:31:59:  at sun.security.ssl.TransportContext.kickstart(TransportContext.java:220)
Jun 8 09:31:59:  at sun.security.ssl.SSLEngineImpl.beginHandshake(SSLEngineImpl.java:97)
Jun 8 09:31:59:  at com.digitalroute.rcp.DRRCPSSLUtils.createSSLEngine(DRRCPSSLUtils.java:203)
Jun 8 09:31:59:  ... 13 more

      The desktop client side shows the following error:

      The CM system is running fine and the browser access to the admin site also works. 


Read more...

Environment

SAP Convergent Mediation system version older or equal to 4.2 (MZ version 8.1.4.7) 

Oracle JDK 1.8.291 or newer

Product

SAP Convergent Mediation 4.0 by DigitalRoute ; SAP Convergent Mediation 4.1 by DigitalRoute ; SAP Convergent Mediation 4.2 by DigitalRoute

Keywords

JDK 1.8.291, SSL, TLS 1.0, TLS 1.1  , KBA , XX-PART-DRT , DigitalRoute , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.