Symptom
A TLS connection from AS Java to Ariba using the IAIK library (refer to SAP Note 2284059) fails during the SSL handshake. The trace may show entries such as:
ssl_debug(478): Starting handshake (iSaSiLk 5.2)...
ssl_debug(478): Sending v3 client_hello message to <HOSTNAME of target server>:<PORT>, requesting version TLS or SSL version
ssl_debug(478): Sending extensions: elliptic_curves (10), renegotiation_info (65281), signature_algorithms (13), server_name (0), ec_point_formats (11)
ssl_debug(478): IOException while handshaking: Connection closed by remote host.
ssl_debug(478): Sending alert: Alert Fatal: handshake failure
ssl_debug(478): Shutting down SSL layer...
ssl_debug(478): Closing transport...
OR
ssl_debug(6): Starting handshake (iSaSiLk)...
ssl_debug(6): Sending v3 client_hello message to <server>, requesting version <TLS version>...
ssl_debug(6): Sending extensions: renegotiation_info (XXXX), signature_algorithms (XX)
ssl_debug(6): IOException while handshaking: Connection reset
ssl_debug(6): Sending alert: Alert Fatal: handshake failure
Or
Any SSL handshake error
Read more...
Environment
SAP NetWeaver Application Server Java
Product
Keywords
SSL,handshake,SNI,Ciphers,TLS,policy,ssl_debug,Ping,destination,channel,Ariba,AribaNetworkAdapterSAPNetweaver,Ariba Network Adapter , KBA , BC-JAS-SEC-CPG , Cryptography , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview