SAP Knowledge Base Article - Preview

3681212 - Resolving SSLHandshakeException Due to CA Certificate Changes

Symptom

The CA certificate for certain SAP services were updated from Let's Encrypt ISRG Root X1 to Let's Encrypt ISRG Root X2 to enhance security and performance. This change may cause SSL handshake issues when connecting to the SAP Cloud Connector, potentially resulting in errors. 

The issue is possible to be seen in the Cloud connector´s logs as bellow:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 


Read more...

Environment

  • SAP Cloud Connector
  • Datasphere Service
  • JVM versions prior to 8.1.106

Keywords

SSLHandshakeException, Datasphere, SAP Cloud Connector, Let's Encrypt, SSL Certificate Update, JVM Upgrade , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , DS-DI , Data Integration/Data Builder , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.