SAP Knowledge Base Article - Preview

3390881 - SAP Cloud Connector: "No CA certificate available, which is required for supporting Principal Propagation."

Symptom

Principal propagation is not working as expected. The following error messages are seen in the ljs_trace.log ro scc_core.trc file of SAP Cloud Connector.

<>ERROR#com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler#tunnel-client-25-6##Unable to generate authorization token
java.lang.IllegalStateException: No CA certificate available, which is required for supporting Principal Propagation.
    at com.sap.scc.cert.CertificateGenerator.createLocalToken(CertificateGenerator.java:235)
    at com.sap.scc.cert.CertificateGenerator.createToken(CertificateGenerator.java:176)
    at com.sap.scc.cert.CertificateGenerator.generateToken(CertificateGenerator.java:136)
    at com.sap.scc.sso.SccBackendTokenGenerator.generateToken(SccBackendTokenGenerator.java:52)
    at com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler.generateAuthenticationToken(HttpAuthenticationHandler.java:145)
    at com.sap.core.connectivity.protocol.http.handlers.HttpAuthenticationHandler.handleHttpRequest(HttpAuthenticationHandler.java:81)
    at com.sap.core.connectivity.protocol.http.handlers.HttpAbstractAuthenticationHandler.writeImpl(HttpAbstractAuthenticationHandler.java:49)
    at com.sap.core.connectivity.protocol.http.handlers.HttpProtocolHandler.write(HttpProtocolHandler.java:83)
    at io.netty.channel.AbstractChannelHandlerContext.invokeWrite0(AbstractChannelHandlerContext.java:879)
    at io.netty.channel.AbstractChannelHandlerContext.invokeWrite(AbstractChannelHandlerContext.java:863)
    at io.netty.channel.AbstractChannelHandlerContext.write(AbstractChannelHandlerContext.java:968)
    at io.netty.channel.AbstractChannelHandlerContext.write(AbstractChannelHandlerContext.java:856)
    at io.netty.channel.ChannelDuplexHandler.write(ChannelDuplexHandler.java:115)


Read more...

Environment

SAP Cloud Connector

Product

CONNECTOR FRAMEWORK all versions

Keywords

Principal propagation, No CA certificate available, Cloud Connector, SCC, Authorization token, SSO, X509, Unable to generate authorization token for user , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.