Symptom
- mTLS handshake fails at client certificate verification stage .
- HAProxy log error: “SSL client CA chain cannot be verified”
- Client side error: “Certificate validation failed - unknown_ca”
- Client logs indicate multiple CAs supported by Load Balancer.
- Load balancer responds with HTTP 401 Unauthorized
Read more...
Environment
SAP Traceability Hub
Product
SAP Traceability Hub all versions
Keywords
mTLS, HTTP 401, HAProxy, Root CA missing, SSL handshake failure, unknown_ca, certificate validation, Custom Domain Manager, client authentication , KBA , IS-LS-TH-OBT , SAP Traceability Hub Onboarding Issues , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview