3350339 - Cloud Connector HA setup - Error : no trust relationship - reset shadow

- HA Failover failed

or

- Master cannot connect to Shadow / Shadow cannot connect to Master

In ljs_trace we see following logs:

- Master:

2023-06-23 22:26:11,854 -0600#WARN#com.sap.scc.ha#scc-init-push-25hrbbu6#          #master XXXXX: Initial push failed: com.sap.scc.ha.HaHttpClientException: no trust relationship - reset shadow
com.sap.scc.ha.HaHttpClientException: no trust relationship - reset shadow
    at com.sap.scc.ha.HaHttpClientSession.prepare(HaHttpClientSession.java:105)
    at com.sap.scc.ha.HaHttpClient.beginNewSession(HaHttpClient.java:34)
    at com.sap.scc.ha.PushToShadow.lambda$createInitPushAction$2(PushToShadow.java:149)
    at java.lang.Thread.run(Thread.java:748)
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
    at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:2033)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1135)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1385)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1413)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1397)
    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:436)
    at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
    at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
    at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
    at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)
    at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
    at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
    at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
    at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
    at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
    at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:72)
    at com.sap.scc.ui.SccSingleContextHttpClient.execute(SccSingleContextHttpClient.java:49)
    at com.sap.scc.ha.HaHttpClientSession.executeRequest(HaHttpClientSession.java:164)
    at com.sap.scc.ha.HaHttpClientSession.prepare(HaHttpClientSession.java:76)
    ... 3 common frames omitted

- Shadow:
2023-06-23 22:26:12,150 -0600#ERROR#com.sap.scc.ha#com.sap.scc.ha.PingToMaster#          #Shadow YYYYYYY: Initial push request failed with com.sap.scc.servlets.RequestFailureExecution$IllegalState: Push from master to shadow failed. See logs on master side for details. [Push from master to shadow failed. See logs on master side for details.]
com.sap.scc.servlets.RequestFailureExecution$IllegalState: Push from master to shadow failed. See logs on master side for details.
    at com.sap.scc.ha.PingToMaster.initPush(PingToMaster.java:436)
    at com.sap.scc.ha.PingToMaster.runLoop(PingToMaster.java:265)
    at com.sap.scc.ha.PingToMaster.run(PingToMaster.java:244)
    at java.lang.Thread.run(Thread.java:748)

SAP Cloud Connector.

Cloud Connector HA, no trust relationship - reset shadow  , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem