SAP Knowledge Base Article - Preview

3671641 - Managed Gateway from CIG is failing with (HTTP 503 - The server is currently unavailable to handle the request)

Symptom

While working with CIG Outbound connection flow, same is raising error below:

====
Managed Gateway for Spend&Network has successfully reached your server, however it has responded with an error - HTTP 503 - The server is currently unavailable to handle the request due to a temporarily overloading or maintenance of the server.
====


Upon checking SCC trace (ljs_trace.log / scc_core.trc), following is perceived:

====

20xx-xx-xx xx:xx:xx,xxx +0000#INFO#com.sap.core.connectivity.tunnel.client.handshake.ClientProtocolHandshaker#tunnel-client-150-9#          #Sending handshake request for tunnelId: account:///<sub-account-ID>/<Location-ID> and host: connectivitytunnel.hana.ondemand.com:443

20xx-xx-xx xx:xx:xx,xxx +0000#WARN#io.netty.util.concurrent.DefaultPromise#tunnel-client-150-9#          #An exception was thrown by com.sap.core.connectivity.spi.ssl.SSLHandshakeValidator.operationComplete()
java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
    at io.netty.util.concurrent.DefaultPromise.get(DefaultPromise.java:351)
    at com.sap.core.connectivity.spi.ssl.SSLHandshakeValidator.operationComplete(SSLHandshakeValidator.java:36)

Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
    at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1521)

Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem
    at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397)
    at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302)

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

20xx-xx-xx xx:xx:xx,xxx +0000#TRACE#com.sap.core.connectivity.spi.util.ChannelUtil#tunnel-client-150-9#          #Closing channel immediately [id: 0xb0f7e47c, L:/<Local-IP>:<Local-Port> - R:connectivitytunnel.hana.ondemand.com/155.56.210.84:443]
====


Read more...

Environment

  • SAP Cloud Connector(SCC) release independent;
  • SAP Business Technology Platform(BTP);
  • SAP Ariba/CIG.

Product

CONNECTOR FRAMEWORK all versions

Keywords

certificate, refresh, renew, firewall, router, PKIX, digicert, issuer, SCC, 2.16.0, 2.15.0, 2.15.1, 2.15.2, 2.14.2, 2.14.1. 2.14.0, 2.13.0, 2.12, 2.10, sub-account, subaccount, cloud foundry, Neo, BTP, connection, SSL Engine, SSLEngine, WebUI, Web UI, Issuer, Subject DN, firewall, router, certificate, sign, signed, signing, TLS, TLS-termination, TLS termination, SSL, inspection, DigiCert Global, root CA, CA, hana.ondemand.com, ondemand.com, Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, sap cloud connector, connector, CC, SCC, HTTP 503, 503, unavailable, handle, outbound, managed gateway, Spend&Network , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , BNS-ARI-CI-PLT-CON , Managed Gateway - Buy side Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.