3724630 - ADS reports may fail after root certificate replacement in the SAP BTP, Neo Environment

SAP BTP, Neo environment is adding the "DigiCert Global Root G3" Public Key Infrastructures (PKIs). After the G3 root certificate replacement, ADS test reports and other applications consuming Forms Service by Adobe in the SAP BTP Neo may fail.

The following scenarios can be affected:

1. ABAP system -> Forms Service by Adobe (ADS) on BTP Neo
   • In this scenario the abap system is connecting to Forms Service by Adobe (ADS) directly via RFC.
   • ADS test report FP_TEST_00, FP_PDF_TEST_00, and FP_CHECK_DESTINATION_SERVICE return ads exceptions
   • In icm trace in the abap system, the following error are logged:
     [xxxx] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=7f90e80044c0)==SSSLERR_PEER_CERT_UNTRUSTED
     [xxxx] *** ERROR => SSL handshake with adsformsprocessing-<yoursubaccount:technicalname>.<yourregionhost:[xxx].hana.ondemand.com>:443 failed: SSSLERR_PEER_CERT_UNTRUSTED (-102)
     [xxxx]              Peer's X.509 certificate (chain) validation failed (missing trust?)
     
     
2. Forms Service by Adobe (ADS) on BTP Neo -> Cloud Connector -> ABAP system
   • In this scenario ADS is fetching form templates from ABAP system via Cloud Connector. 
   • Report FP_TEST_00 and FP_CHECK_DESTINATION_SERVICE with destination service can return the following error:
     com.adobe.ProcessingException: com.adobe.ProcessingException: com.adobe.ads.destination.DestinationException: HTTP-503 Error.(200,101).
   • The following error messages can be found in scc_core.trc/ljs_trace.log traces on Cloud Connector:
     • "Unexpected exception while establishing tunnel connection for tunnel: account:///xxxxxx javax.net.ssl.SSLException: SSLEngine closed already".
     • "java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target".

Forms Service by Adobe
SAP BTP, Neo Environment

Adobe Document Services, ADS, Forms Service by Adobe, Neo Environment, com.adobe.ads.destination.DestinationException, SSSLERR_PEER_CERT_UNTRUSTED, BTP subaccount, G3 root certificate, DigiCert Global Root G3. , KBA , BC-SRV-FP-NEO , Adobe-Interactive-Forms-Cloud-Wartung, Neo , Problem