Symptom
The below error message appears within dev_icm level 3 trace logs after changing ciphersuites.
The similar error can also be found in dev_ms or trace level 2.
] SSL_get_state()==0x1110 "TLS read client hello A"
] *** ERROR during secussl_read() from SSL_read()==SSL_ERROR_SSL
] srv SSL session PSE "C:\usr\sap\TEST\TEST\sec\SAPSSLS.pse"
] session ciphersuites=545:PFS:HIGH::EC_X25519:EC_P256:EC_HIGH
] Server SSL_CTX 00000155919335B0 pvflags=513 (TLSv1.2,BC)
] secussl_read: SSL_read() failed (456453242/0x3452423426235)
] => "Unsupported SSL/TLS protocol version in ClientHello."
] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
] Unsupported SSL/TLS protocol version in ClientHello.
] (SSL CTX supports versions: TLSv1.2). ClientHello.client_version TLSv1.0 {0x03,0x01}
] << ---------- End of Secu-SSL Errorstack ----------
] SSL NI-hdl 107: local=localhost:8080 peer=clienthost:934952
] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=4352341423)==SSSLERR_UNSUPP_PROTOCOL_VERSION
] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStartNB returned (-108): SSSLERR_UNSUPP_PROTOCOL_VERSION [icxxconn.c 2005]
Read more...
Environment
- SAP NetWeaver
- SAP Web Application Server for SAP S/4HANA
- ABAP Platform
Product
Keywords
SSL, TLSv1.2, TLSv1.0, SSSLERR_UNSUPP_PROTOCOL_VERSION, TLS, , KBA , BC-SEC-SSL , Secure Sockets Layer Protocol , How To
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview