Symptom
The below error message appears within dev_icm level 3 trace logs after changing ciphersuites.
The similar error can also be found in dev_ms or trace level 2.
] SSL_get_state()==0x1110 "TLS read client hello A"
] *** ERROR during secussl_read() from SSL_read()==SSL_ERROR_SSL
] srv SSL session PSE "C:\usr\sap\TEST\TEST\sec\SAPSSLS.pse"
] session ciphersuites=545:PFS:HIGH::EC_X25519:EC_P256:EC_HIGH
] Server SSL_CTX 00000155919335B0 pvflags=513 (TLSv1.2,BC)
] secussl_read: SSL_read() failed (456453242/0x3452423426235)
] => "Unsupported SSL/TLS protocol version in ClientHello."
] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
] Unsupported SSL/TLS protocol version in ClientHello.
] (SSL CTX supports versions: TLSv1.2). ClientHello.client_version TLSv1.0 {0x03,0x01}
] << ---------- End of Secu-SSL Errorstack ----------
] SSL NI-hdl 107: local=localhost:8080 peer=clienthost:934952
] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=4352341423)==SSSLERR_UNSUPP_PROTOCOL_VERSION
] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStartNB returned (-108): SSSLERR_UNSUPP_PROTOCOL_VERSION [icxxconn.c 2005]
Read more...
Environment
- SAP NetWeaver
- SAP Web Application Server for SAP S/4HANA
- ABAP Platform
Product
Keywords
SSL, TLSv1.2, TLSv1.0, SSSLERR_UNSUPP_PROTOCOL_VERSION, TLS, , KBA , BC-SEC-SSL , Secure Sockets Layer Protocol , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.