Symptom
Error is raised during validation of connection created in SAP Datasphere via Space Management:
Connection "Connection_Name" is valid, but not all features are available.
- Data flows are enabled.
- Remote tables can't be used because of errors in the connection.
Remote Tables: Unable to connect remote source: [SAP AG][LIBODBCHDB SO][HDBODBC] Communication link failure;-10709 Connection failed (RTE:[300010] Cannot create SSL context: Error in api.SSL_CTX_set_default_pse_by_name /tmp/5a9aa7d6-ce81-4f54-9e2d-5ce23768f454/sec/sapcli.pse - SSL error [4129]: Unknown error, General error: 0x00001021 | SAPCRYPTOLIB | SSL_CTX_set_default_pse_by_name SAPCRYPTO API error The PSE file does not exist. 0xa1d50108 | TOKEN_TOKPSE | SSL_CTX_set_default_pse_by_name Token application not existing Cannot open PSE (PSE=/tmp/5a9aa7, Code: 5921, SQL State: HY000
or
Unable to connect remote source: [SAP AG][LIBODBCHDB SO][HDBODBC] Communication link failure;-10709 Connection failed (RTE:[89013] Socket closed by peer{xxx.xx.xxx.xx:xxxxx -> xxx.xx.xxx.xx:xxxxx} (xxx.xx.xxx.xx:xxxxx -> xxx.xx.xxx.xx:xxxxx)), Code: 5921, SQL State: HY000
Environment
SAP Datasphere
Reproducing the Issue
Executing "Validate" in Local Connections in "Space Management"
Cause
- Missing SSL certificate
- IP address not added to the allowelist
Resolution
1) Download Root SSL certificate as mentioned in Import Certificates for SSL Connections to Remote Sources
2) Upload it via "Configuration" -> "Security" as mentioned in Upload Certificates
3) [if Validate Server Certificate = true] Host Name in Server Certificate:
Verify the host name field of the server certificate:
- If the string is “*”, any name matches.
- If the string starts with “CN=”, it is treated as a common name, and the textual representation of the common name entry in the certificate must be exactly the same.
More information in SAP HANA Connections
See Also
Keywords
SSL, certificate, connection , KBA , DS-DI-CON , Connections , Known Error