Symptom
The CA certificate for certain SAP services were updated from Let's Encrypt ISRG Root X1 to Let's Encrypt ISRG Root X2 to enhance security and performance. This change may cause SSL handshake issues when connecting to the SAP Cloud Connector, potentially resulting in errors.
The issue is possible to be seen in the Cloud connector´s logs as bellow:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Read more...
Environment
- SAP Cloud Connector
- Datasphere Service
- JVM versions prior to 8.1.106
Keywords
SSLHandshakeException, Datasphere, SAP Cloud Connector, Let's Encrypt, SSL Certificate Update, JVM Upgrade , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , DS-DI , Data Integration/Data Builder , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview