3527609 - Error "SSL certificate validation failed" when consuming SAP Datasphere via OpenSQL Schema

Symptom

Following error occurs when attempting to connect SAP Datasphere into a HANA On-Premise (OP):
"Communication link failure; -10709 Connection failed (RTE: [300015] SSL certificate validation failed: SSL error [536872221]: Unknown error, General Error."

SAP DBTech JDBC: [403]: internal error: Cannot get remote source objects: [SAP AGJ[LIBODBCHDB SO][HDBODBC] Communication link failure;-10709 Connection failed (RTE:[300015] SSL certificate validation failed: SSL error [536872221]: Unknown error. General Error.

Environment

SAP Datasphere

Reproducing the Issue

Attempt to use Datasphere's OpenSQL DB User in a HANA OP;
Encounter the error message mentioned in the symptom.

Resolution

Follow HANA Cloud documentation which is relevant also for SAP Datasphere context:

To establish this communication, download the certificate from Datasphere's HANA Cloud DigiCert:

DigiCert Global Root CA: https://dl.cacerts.digicert.com/DigiCertGlobalRootCA.crt.pem
DigiCert TLS RSA4096 Root G5: https://cacerts.digicert.com/DigiCertTLSRSA4096RootG5.crt.pem

To import the certificates either use

Import Certificates for SSL Connections to Remote Sources
Install OpenSSL in the client system trying to connect to the HANA server and run the command openssl s_client -showcerts -servername <hana server hostname> -connect <hana server hostname>:443 The hana server hostname used in the Datasphere tenant can be found by following Connect and Configure Data Provisioning Agent . The OpenSSL testing can be helpful to find if there are anything blocking the connection between the client and the HANA server.

Keywords

On-Premise HANA, SAP Cloud Instance, Connection, Error, SSL Certificate Validation Failed, Communication Link Failure. , KBA , DS-SM , Space Management , HAN-DB-CLI , SAP HANA Clients (JDBC, ODBC) , HAN-CLS-HC , HANA Cloud Services HANA Cloud , Problem

Product

SAP Datasphere all versions