SAP Knowledge Base Article - Preview

3681212 - Resolving SSLHandshakeException Due to CA Certificate Change in Datasphere Service

Symptom

On October 2025, the CA certificate for the Datasphere service was updated from Let's Encrypt ISRG Root X1 to Let's Encrypt ISRG Root X2. This change may cause SSL handshake issues when connecting to the SAP Cloud Connector, resulting in the error bellow:

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 


Read more...

Environment

  • SAP Cloud Connector
  • Datasphere Service
  • JVM versions prior to 8.1.106

Keywords

SSLHandshakeException, Datasphere, SAP Cloud Connector, Let's Encrypt, SSL Certificate Update, JVM Upgrade , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , DS-DI , Data Integration/Data Builder , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.