SAP Knowledge Base Article - Preview

3429080 - AS Java fails to start while using secured JDBC scenario - unable to find valid certification path to requested target - exit code 558

Symptom

While connecting AS Java to Database (DB) with secured (SSL enabled) JDBC, application server fails to start. You can find exceptions in specific log files:

dev_jstart:

[...]
F  ********************************************************************************
F  *** ERROR => Node 'bootstrap' failed with exit code 558.
F  ***
F  *** Please see section 'Failures in the 'synchronizing binaries' phase'
F  *** in SAP Note 1316652 for additional information and trouble shooting advice.
F  ********************************************************************************
F  
F  [Thr 11152] *** LOG => exiting (exitcode 22002, retcode 1).
[...]

dev_bootstrap:

[...]
F  [Thr 8760] *** LOG => SfCJavaVm: exit hook is called. (rc = 558)
F  
F  ********************************************************************************
F  *** ERROR => Java node 'Instance_bootstrap' terminated with exit code 558.
F  ***
F  *** Please see section 'Java program exit codes'
F  *** in SAP Note 1316652 for additional information and trouble shooting advice.
F  ********************************************************************************
F  
F  [Thr 8760] *** LOG => exiting (exitcode 558, retcode 1).
M  [Thr 8760] CCMS: CCMS Monitoring Cleanup finished successfully.
[...]

jvm_bootstrap:

[...]
----------==[ Caused by: ]==----------
com.sap.engine.frame.core.configuration.ConfigurationException: Error while connecting to DB.
[...]
Caused by: com.sap.db.jdbc.exceptions.JDBCDriverException: SAP DBTech JDBC: SSL handshake failed. General SSLEngine problem
    at com.sap.db.jdbc.exceptions.SQLExceptionSapDB._newInstance(SQLExceptionSapDB.java:209)
    at com.sap.db.jdbc.exceptions.SQLExceptionSapDB._newInstance(SQLExceptionSapDB.java:222)
    at com.sap.db.jdbc.exceptions.SQLExceptionSapDB.newInstance(SQLExceptionSapDB.java:33)
    at com.sap.db.jdbc.SecureSession._doHandshake(SecureSession.java:670)
    at com.sap.db.jdbc.SecureSession._sslInit(SecureSession.java:170)
    at com.sap.db.jdbc.SecureSession.<init>(SecureSession.java:74)
    at com.sap.db.jdbc.SecureSocketSession.<init>(SecureSocketSession.java:21)
    at com.sap.db.jdbc.SecureChannelSession.<init>(SecureChannelSession.java:21)
    at com.sap.db.jdbc.Session.newInstance(Session.java:310)
    at com.sap.db.jdbc.ConnectionSapDB._connectAnchor(ConnectionSapDB.java:3331)
    at com.sap.db.jdbc.DriverSapDB._connect(DriverSapDB.java:3492)
    ... 25 more
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
[...]
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
[...]
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:146)
    at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:131)
    at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)
    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)
    ... 45 more


Read more...

Environment

SAP NetWeaver Application Server Java

Product

SAP NetWeaver Application Server for Java all versions

Keywords

cryptolib, crypto, jdbc driver , KBA , BC-JVM , SAP Java Virtual Machine , BC-JAS-SF , Startup Framework , BC-DB-MSS , SQL Server in SAP NetWeaver Products , BC-DB-ORA , Oracle , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.