Symptom
- Connection test for HTTPS type system mapping shows "Not Reachable".
- Below error is shown when checking connection details.
- Below error in DEBUG level ljs_trace or scc_core.trc, refer to Note 2452568 for collecting the trace.
*The below trace shows subject alternatives names, it can be empty as [] if no SAN available in backend's certificate.
2025-01-13 09:45:18,991 +0800#INFO#com.sap.scc.rt#AccessControl connection checker# #SccEndpointValidator failed to establish connection to HTTPS://host name or IP addres:port
javax.net.ssl.SSLPeerUnverifiedException: Certificate for <host name or IP addres> doesn't match any of the subject alternative names: [name1, name2]
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.verifyHostname(SSLConnectionSocketFactory.java:507)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:437)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:83)
at com.sap.scc.ui.SccSingleContextHttpClient.executeUriRequest(SccSingleContextHttpClient.java:56)
at com.sap.scc.tcs.e2e.HttpBackendChecker.check(HttpBackendChecker.java:88)
at com.sap.scc.tcs.e2e.SccEndpointValidator.checkConnection(SccEndpointValidator.java:80)
at com.sap.scc.tcs.e2e.SccEndpointValidator.checkEndpoint(SccEndpointValidator.java:66)
at com.sap.scc.servlets.AccessControlServlet$3.run(AccessControlServlet.java:638)
at java.base/java.lang.Thread.run(Thread.java:1583)
* Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
doesn't match any of the subject alternative names""> Read more...
Environment
- SAP Cloud Connector
- SAP Netweaver ABAP
- SAP S/4HANA
Product
SAP NetWeaver all versions ; SAP S/4HANA all versions
Keywords
SAP Cloud Connector, SCC, system mapping, SSL, HTTPS, ABAP, certificate, doesn't match any of the subject alternative names, subject alternative names, subject, SAN, not reachable , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.