3559185 - Connection test for system mapping fails with error "Certificate for <host name/IP address> doesn't match any of the subject alternative names"

• Connection test for HTTPS type system mapping shows "Not Reachable".
  
  
  
  
• Below error is shown when checking connection details.
  
  
  
  
  
• Below error in DEBUG level ljs_trace or scc_core.trc, refer to KBA 2452568 for collecting the trace.
  *The below trace shows subject alternatives names, it can be empty as [] if no SAN available in backend's certificate.
  
  2025-01-13 09:45:18,991 +0800#INFO#com.sap.scc.rt#AccessControl connection checker#          #SccEndpointValidator failed to establish connection to HTTPS://host name or IP addres:port
  javax.net.ssl.SSLPeerUnverifiedException: Certificate for <host name or IP addres> doesn't match any of the subject alternative names: [name1, name2]
      at org.apache.http.conn.ssl.SSLConnectionSocketFactory.verifyHostname(SSLConnectionSocketFactory.java:507)
      at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:437)
      at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
      at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
      at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
      at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)
      at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
      at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
      at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
      at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
      at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
      at com.sap.scc.ui.SccSingleContextHttpClient.executeUriRequest(SccSingleContextHttpClient.java:56)
      at com.sap.scc.tcs.e2e.HttpBackendChecker.check(HttpBackendChecker.java:88)
      at com.sap.scc.tcs.e2e.SccEndpointValidator.checkConnection(SccEndpointValidator.java:80)
      at com.sap.scc.tcs.e2e.SccEndpointValidator.checkEndpoint(SccEndpointValidator.java:66)
      at com.sap.scc.servlets.AccessControlServlet$3.run(AccessControlServlet.java:638)
      at java.base/java.lang.Thread.run(Thread.java:1583)
  
  

  * Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP Cloud Connector
• SAP Netweaver ABAP
• SAP S/4HANA

SAP Cloud Connector, SCC, system mapping, SSL, HTTPS, ABAP, certificate, doesn't match any of the subject alternative names, subject alternative names, subject, SAN, not reachable , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem