SAP Knowledge Base Article - Preview

3276488 - HTTPS connection to Backend system "not reachable" from SCC with error "Peer certificate rejected by ChainVerifier"

Symptom

On premise backend systems are not reachable through SCC . 

Error reported in ljs_trace :

2022-11-21 17:11:35,636 +0530#INFO#com.sap.scc.rt#com.sap.scc.servlets.AccessControlServlet$3#          #SccEndpointValidator failed to establish connection to HTTPS://<hostname>:44300
iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
    at iaik.security.ssl.y.a(SourceFile:932)
    at iaik.security.ssl.n.b(SourceFile:1066)
    at iaik.security.ssl.n.a(SourceFile:1503)
    at iaik.security.ssl.y.d(SourceFile:784)
    at iaik.security.ssl.SSLTransport.startHandshake(SourceFile:569)
    at iaik.security.ssl.SSLSocket.startHandshake(SourceFile:386)
    at com.sap.scc.tcs.e2e.BackendCheckHelper$TLSSecuredBackendCheckHelper.check(BackendCheckHelper.java:147)
    at com.sap.scc.tcs.e2e.HttpBackendChecker.check(HttpBackendChecker.java:58)
    at com.sap.scc.tcs.e2e.SccEndpointValidator.checkConnection(SccEndpointValidator.java:86)
    at com.sap.scc.tcs.e2e.SccEndpointValidator.checkEndpoint(SccEndpointValidator.java:72)
    at com.sap.scc.servlets.AccessControlServlet$3.run(AccessControlServlet.java:562)
    at java.lang.Thread.run(Thread.java:838)


Read more...

Environment

SAP Cloud Connector

Keywords

SAP cloud Connector, SCC, Trust store, certificate, SCC configuration, not reachable, backend, root certificate, HTTP, HTTPS , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.