SAP Knowledge Base Article - Preview

3696527 - SAP Cloud Connector issue: HTTP/HTTPS connection not reachable with exception "java.security.SignatureException: Signature does not match."

Symptom

  • HTTP/HTTPS connection is not reachable in the SAP Cloud Connector with the exception "java.security.cert.CertPathValidatorException: signature check failed" .
  • In the SCC logs (ljs_trace.log (<2.17)/scc_core.trc (>=2.17)) following entries are there:

#DEBUG#org.apache.tomcat.util.net.Nio2Endpoint.handshake#https-jsse-nio2-8443-exec-9#          #Handshake failed for client connection from IP address [xx.xxx.xx.xxx] and port [xxxx]
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
    at sun.security.ssl.Alert.createSSLException(Alert.java:131)
...
    at java.lang.Thread.run(Thread.java:838)
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
    at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:369)
...
    at sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1280)
    ... 24 common frames omitted
Caused by: java.security.cert.CertPathValidatorException: signature check failed
    at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
...
    at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:364)
    ... 30 common frames omitted
Caused by: java.security.SignatureException: Signature does not match. 

*Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental*


Read more...

Environment

SAP Cloud Connector release independent.

Product

CONNECTOR FRAMEWORK all versions ; SAP Connectivity service all versions

Keywords

sap cloud connector, s4hana qas, http connection issue, ssl handshake, certificate validity, scc upgrade, jvm upgrade, cloud to on-premise, abap system, strust, digicert tls rsa4096 root g5, connectivity issue, sap connectivity service, , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.