Symptom
While setting up and HTTPS connection between SCC and third-party Load Balancer(AWS, Azure, Google), following is perceived from SCC trace (ljs_trace.log / scc_core.trc).
====
20x-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker# #ssl_debug(1): Starting handshake (iSaSiLk 5.106)...
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker# #ssl_debug(1): Sending v3 client_hello message to <backend-host-here>:443, requesting version 3.3...
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker# #ssl_debug(1): Sending extensions: renegotiation_info (65281), signature_algorithms (13), server_name (0)
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker# #ssl_debug(1): Received alert message: Alert Fatal: handshake failure
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker# #ssl_debug(1): SSLException while handshaking: Peer sent alert: Alert Fatal: handshake failure
20xx-xx-xx xx:xx:xx,xxx +0000#DEBUG#com.sap.scc.rt#AccessControl connection checker# #ssl_debug(1): Shutting down SSL layer...
20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.scc.rt#AccessControl connection checker# #SccEndpointValidator for <backend-host-here>:443 can't retrieve further TLS information witk IAIK
iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
at iaik.security.ssl.y.f(SourceFile:414)
at iaik.security.ssl.n.b(SourceFile:729)
at iaik.security.ssl.n.a(SourceFile:1503)
====
Read more...
Environment
- SAP Cloud Connector(SCC) release independent;
- Third-party load balancer mechanism.
Product
Keywords
SAP Cloud connector, SCC, CC, connector, cloud connector, TLS, SSL, HTTPS, encrypt, LB, load balancer, third-party, third party Azure, AWS, Google cloud, cloud, router, firewall, sslexception, ssl exception, handshake, hand shake, SSL layer, alert fatal, peer sent alert, iaik.security.ssl.SSLException, client_hello, signature_algorithms, IAIK, SccEndpointValidator , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview