SAP Knowledge Base Article - Preview

3306012 - ICM Error : SSSLERR_UNSUPP_PROTOCOL_VERSION during TLS version change

Symptom

The below error message appears within dev_icm level 3 trace logs after changing ciphersuites.

The similar error can also be found in dev_ms or trace level 2.

    ]   SSL_get_state()==0x1110 "TLS read client hello A"
    ] *** ERROR during secussl_read() from SSL_read()==SSL_ERROR_SSL
    ]   srv SSL session PSE "C:\usr\sap\TEST\TEST\sec\SAPSSLS.pse"
    ]   session ciphersuites=545:PFS:HIGH::EC_X25519:EC_P256:EC_HIGH
    ]   Server SSL_CTX 00000155919335B0 pvflags=513 (TLSv1.2,BC)
    ] secussl_read: SSL_read() failed  (456453242/0x3452423426235)
    ]    => "Unsupported SSL/TLS protocol version in ClientHello."
    ] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
    
    ] Unsupported SSL/TLS protocol version in ClientHello.
    ] (SSL CTX supports versions: TLSv1.2). ClientHello.client_version TLSv1.0 {0x03,0x01}
    ] << ---------- End of Secu-SSL Errorstack ----------
    ]   SSL NI-hdl 107: local=localhost:8080 peer=clienthost:934952
    ] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=4352341423)==SSSLERR_UNSUPP_PROTOCOL_VERSION
    ] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStartNB returned (-108): SSSLERR_UNSUPP_PROTOCOL_VERSION [icxxconn.c   2005] 


Read more...

Environment

  • SAP NetWeaver
  • SAP Web Application Server for SAP S/4HANA
  • ABAP Platform

Product

ABAP platform all versions ; SAP NetWeaver Application Server all versions

Keywords

SSL, TLSv1.2, TLSv1.0, SSSLERR_UNSUPP_PROTOCOL_VERSION, TLS, , KBA , BC-SEC-SSL , Secure Sockets Layer Protocol , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.