SAP Knowledge Base Article - Preview

3559185 - Connection test for system mapping fails with error "Certificate for <host name/IP address> doesn't match any of the subject alternative names"

Symptom

  • Connection test for HTTPS type system mapping shows "Not Reachable".



  • Below error is shown when checking connection details.




  • Below error in DEBUG level ljs_trace or scc_core.trc, refer to Note 2452568 for collecting the trace.
    *The below trace shows subject alternatives names, it can be empty as [] if no SAN available in backend's certificate.

    2025-01-13 09:45:18,991 +0800#INFO#com.sap.scc.rt#AccessControl connection checker#          #SccEndpointValidator failed to establish connection to HTTPS://host name or IP addres:port
    javax.net.ssl.SSLPeerUnverifiedException: Certificate for <host name or IP addres> doesn't match any of the subject alternative names: [name1, name2]
        at org.apache.http.conn.ssl.SSLConnectionSocketFactory.verifyHostname(SSLConnectionSocketFactory.java:507)
        at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:437)
        at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
        at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
        at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
        at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)
        at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
        at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
        at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
        at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
        at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
        at com.sap.scc.ui.SccSingleContextHttpClient.executeUriRequest(SccSingleContextHttpClient.java:56)
        at com.sap.scc.tcs.e2e.HttpBackendChecker.check(HttpBackendChecker.java:88)
        at com.sap.scc.tcs.e2e.SccEndpointValidator.checkConnection(SccEndpointValidator.java:80)
        at com.sap.scc.tcs.e2e.SccEndpointValidator.checkEndpoint(SccEndpointValidator.java:66)
        at com.sap.scc.servlets.AccessControlServlet$3.run(AccessControlServlet.java:638)
        at java.base/java.lang.Thread.run(Thread.java:1583)

    * Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.


doesn't match any of the subject alternative names""> Read more...

Environment

  • SAP Cloud Connector
  • SAP Netweaver ABAP
  • SAP S/4HANA

Product

SAP NetWeaver all versions ; SAP S/4HANA all versions

Keywords

SAP Cloud Connector, SCC, system mapping, SSL, HTTPS, ABAP, certificate, doesn't match any of the subject alternative names, subject alternative names, subject, SAN, not reachable , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.