SAP Knowledge Base Article - Preview

3089131 - SSSLERR_SERVER_CERT_MISMATCH error while sending message from ERP to CPI

Symptom

When a message is attempted to be sent from ERP to CPI, the error shown below is observed in the ICM trace.

  • [timestamp]   MatchTargetName("tenant-url", dNSName="*.cf.DC.hana.ondemand.com") MISma
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.uaa.cf.DC.hana.ondemand.com") M
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.login.cf.DC.hana.ondemand.com")
    [timestamp]   MatchTargetName("tenant-url", dNSName="xsuaa-api.DC.hana.ondemand.com")
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.xsuaa-api.DC.hana.ondemand.com"
    [timestamp]   MatchTargetName("tenant-url", dNSName="authentication.DC.hana.ondemand.c
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.authentication.DC.hana.ondemand
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.cfapps.DC.hana.ondemand.com") M
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.subscription-management-dashboard
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.operationsconsole.cfapps.DC.han
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.internal.cfapps.DC.hana.ondeman
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.auditlog-viewer.cfapps.DC.hana.
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.cert.cfapps.DC.hana.ondemand.co
    [timestamp]   MatchTargetName("tenant-url", dNSName="cockpit.DC.hana.ondemand.com") MI
    [timestamp]   MatchTargetName("tenant-url", dNSName="authentication.cert.DC.hana.ondem
    [timestamp]   MatchTargetName("tenant-url", dNSName="*.authentication.cert.DC.hana.ond
    [timestamp]   MatchTargetName("tenant-url", CN="*.cf.DC.hana.ondemand.com") MISmatch
    [timestamp] <<- ERROR: SapSSLSessionStart(sssl_hdl=11178fcf0)==SSSLERR_SERVER_CERT_MISMATCH
    [timestamp]          status = "new SSL session"
    [timestamp]       Server DN = "CN=*.cf.DC.hana.ondemand.com, O=SAP SE, L=Walldorf, SP=Baden-Württemberg, C=DE"
    [timestamp] ->> SapSSLErrorName(rc=-30)
    [timestamp] <<- SapSSLErrorName()==SSSLERR_SERVER_CERT_MISMATCH
    [timestamp] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-30): SSSLERR_SERVER_CERT_MISMATCH {00010006} [icxxconn_mt.
    [timestamp] ->> SapSSLSessionDone(&sssl_hdl=110be6b38)


Read more...

Environment

  • SAP Cloud Integration
  • SAP Integration Suite

Product

SAP Business Technology Platform all versions

Keywords

CPI, ERP, send, message, fail, handshake, SSL, SNI , KBA , LOD-HCI-PI-CON-SOAP , SOAP Adapter , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.