Symptom
- HTTP/HTTPS connection is not reachable in the SAP Cloud Connector with the exception "java.security.cert.CertPathValidatorException: signature check failed" .
- In the SCC logs (ljs_trace.log (<2.17)/scc_core.trc (>=2.17)) following entries are there:
#DEBUG#org.apache.tomcat.util.net.Nio2Endpoint.handshake#https-jsse-nio2-8443-exec-9# #Handshake failed for client connection from IP address [xx.xxx.xx.xxx] and port [xxxx]
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
at sun.security.ssl.Alert.createSSLException(Alert.java:131)
...
at java.lang.Thread.run(Thread.java:838)
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:369)
...
at sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkClientCerts(CertificateMessage.java:1280)
... 24 common frames omitted
Caused by: java.security.cert.CertPathValidatorException: signature check failed
at sun.security.provider.certpath.PKIXMasterCertPathValidator.validate(PKIXMasterCertPathValidator.java:135)
...
at sun.security.validator.PKIXValidator.doValidate(PKIXValidator.java:364)
... 30 common frames omitted
Caused by: java.security.SignatureException: Signature does not match.
*Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental*
Read more...
Environment
SAP Cloud Connector release independent.
Product
Keywords
sap cloud connector, s4hana qas, http connection issue, ssl handshake, certificate validity, scc upgrade, jvm upgrade, cloud to on-premise, abap system, strust, digicert tls rsa4096 root g5, connectivity issue, sap connectivity service, , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview