SAP Knowledge Base Article - Preview

3681448 - AS Java SSL Handshake Failure with Ariba

Symptom

A TLS connection from AS Java to Ariba using the IAIK library (refer to SAP Note 2284059) fails during the SSL handshake. The trace may show entries such as:

ssl_debug(478): Starting handshake (iSaSiLk 5.2)...
ssl_debug(478): Sending v3 client_hello message to <HOSTNAME of target server>:<PORT>, requesting version TLS or SSL version
ssl_debug(478): Sending extensions: elliptic_curves (10), renegotiation_info (65281), signature_algorithms (13), server_name (0), ec_point_formats (11)
ssl_debug(478): IOException while handshaking: Connection closed by remote host.
ssl_debug(478): Sending alert: Alert Fatal: handshake failure
ssl_debug(478): Shutting down SSL layer...
ssl_debug(478): Closing transport... 

OR 

ssl_debug(6): Starting handshake (iSaSiLk)...
ssl_debug(6): Sending v3 client_hello message to <server>, requesting version <TLS version>...
ssl_debug(6): Sending extensions: renegotiation_info (XXXX), signature_algorithms (XX)
ssl_debug(6): IOException while handshaking: Connection reset
ssl_debug(6): Sending alert: Alert Fatal: handshake failure

Or 

Any SSL handshake error 


Read more...

Environment

SAP NetWeaver Application Server Java

Product

SAP NetWeaver Application Server for Java all versions

Keywords

SSL,handshake,SNI,Ciphers,TLS,policy,ssl_debug,Ping,destination,channel,Ariba,AribaNetworkAdapterSAPNetweaver,Ariba Network Adapter , KBA , BC-JAS-SEC-CPG , Cryptography , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.