SAP Knowledge Base Article - Preview

3263511 - AS Java handshake fails - java.lang.IllegalArgumentException: IP Address not allowed for Server Name!

Symptom

  • An SSL/TLS connection to an external server from the AS Java fails.
  • An SSL trace with IAIK debug records (see SAP KBA 2673775) shows the following messages:

    [...]
    ssl_debug(68248): Starting handshake (iSaSiLk 5.2)...
    ssl_debug(68248): Sending v3 client_hello message to <remote system hostname:port>, requesting version 3.3...
    ssl_debug(68248): Sending extensions: elliptic_curves (10), renegotiation_info (65281), signature_algorithms (13), server_name (0), ec_point_formats (11)
    ssl_debug(68248): Received v3 server_hello handshake message.
    ssl_debug(68248): Server selected SSL version 3.3.
    [...]
    ssl_debug(68248): java.lang.IllegalArgumentException: IP Address not allowed for Server Name!
    [...]


Read more...

Environment

SAP NetWeaver Application Server Java using SSL for outgoing connection

Product

SAP NetWeaver Application Server for Java all versions ; SAP NetWeaver all versions

Keywords

Common names, CN, Subject Alternative names, SAN, Process Integration, PI, Process Orchestration, PO, Common name, Subject Alternative name , KBA , BC-JAS-SEC-CPG , Cryptography , BC-JAS-SEC , Security, User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.