3733223 - SAP Cloud Connector - Connection failure after sapjvm upgrade when peer requires TLS_RSA_*

Symptom

After upgrading to SAPJVM 8.1.108 or SAP Machine 21, connections to a peer that requires the older cipher suites listed below fail.

TLS_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_128_GCM_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA256
TLS_RSA_WITH_AES_128_CBC_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA

Environment

SAP Cloud Connector 2.18 - 2.19

sapjvm 8.1.108

sap machine 21

Product

CONNECTOR FRAMEWORK all versions

Keywords

cloud connector, sapjvm, tls_rsa_with_aes_128_gcm_sha256, tls_rsa, obsolete cipher, cipher suite, jdk.tls.disabledAlgorithms, java.security, tls handshake failure, forward secrecy, scc 2.19.0, upgrade impact, tls compatibility, legacy cipher enablement, connectivity failure , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.