SAP Knowledge Base Article - Preview

3296430 - 503-Service not available: SSL peer certificate expired

Symptom

When trying to access a system through a SAP Web Dispatcher, a "503 Service not available" or "ICMERUNLEVELSTOPPED" message is returned.

  • The dev_webdisp trace file has the following entries:
    *** ERROR => Read info from <sid> message server <message server host> failed: SSL peer certificate expired(-47), see also SAP note 1528396 [icrxx.c]
    or
    *** ERROR => SSL handshake with <Message Server host>:<Message-Server-HTTPS-Port> failed: SSSLERR_PEER_CERT_EXPIRED (-101)
    Peer's X.509 certificate (chain) is expired (or not yet valid)

  • SAP Web Dispatcher checkconfig results:
    Server info will be retrieved from host: <Message Server host>:<Message-Server-HTTPS-Port> with protocol: https
    Checking connection to message server of system <SID>...ERROR: SapSSLSessionStart failed SSSLERR_PEER_EXPIRED(-101) 

  • In WDP admin page -> Backend System Configuration Info, the below warning info:
    Read info from message server failed: SSL peer certificate expired
    Refer to SAP note 1528396


Read more...

Environment

SAP Web Dispatcher
SAP NetWeaver
ABAP Platform

Product

ABAP platform all versions ; SAP NetWeaver all versions ; SAP Web Dispatcher all versions

Keywords

Read info from message server failed, SSL peer certificate expired(-47), certified expired, service not available, 503, ICMERUNLEVELSTOPPED, SSSLERR_PEER_CERT_EXPIRED , KBA , BC-CST-WDP , Web Dispatcher , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.