SAP Knowledge Base Article - Preview

3669926 - "Peer sent alert: Alert Fatal: handshake failure" is raised when SCC communicates with third-party load balancer

Symptom

While setting up and HTTPS connection between SCC and third-party Load Balancer(AWS, Azure, Google), following is perceived from SCC trace (ljs_trace.log / scc_core.trc).


====
20x-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker#          #ssl_debug(1): Starting handshake (iSaSiLk 5.106)...
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker#          #ssl_debug(1): Sending v3 client_hello message to <backend-host-here>:443, requesting version 3.3...
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker#          #ssl_debug(1): Sending extensions: renegotiation_info (65281), signature_algorithms (13), server_name (0)
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker#          #ssl_debug(1): Received alert message: Alert Fatal: handshake failure
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker#          #ssl_debug(1): SSLException while handshaking: Peer sent alert: Alert Fatal: handshake failure
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker#          #ssl_debug(1): Shutting down SSL layer...
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc.rt#AccessControl connection checker#          #SccEndpointValidator for <backend-host-here>:443 can't retrieve further TLS information witk IAIK
iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
    at iaik.security.ssl.y.f(SourceFile:414)
    at iaik.security.ssl.n.b(SourceFile:729)
    at iaik.security.ssl.n.a(SourceFile:1503)
====


Read more...

Environment

  • SAP Cloud Connector(SCC) release independent;
  • Third-party load balancer mechanism.

Product

CONNECTOR FRAMEWORK all versions

Keywords

SAP Cloud connector, SCC, CC, connector, cloud connector, TLS, SSL, HTTPS, encrypt, LB, load balancer, third-party, third party Azure, AWS, Google cloud, cloud, router, firewall, sslexception, ssl exception, handshake, hand shake, SSL layer, alert fatal, peer sent alert, iaik.security.ssl.SSLException, client_hello,  signature_algorithms, IAIK, SccEndpointValidator  , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.