RNIF adapter error - Transmitting the message to endpoint failed

[Former Member]

Hi

I have developed one interface SAPR/3 - PI - RNIF (Vendor system). the communication happens from PI to Vendor via HTTPS protocol, the SSL certificates has been installed on PI J2EE engine, and configured in RNIF receiver communication channel.

But when i perofrm end-end test and tryting to send messages from PI to Vendor system getting below error.

"Transmitting the message to endpoint https://**.*.*.:***/SeeburgerDT/HTTPController?HTTPInterface=rosettanet using connection RNIFAdapter failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error transmitting the message over HTTP. Reason: java.lang.RuntimeException: Error while silently connecting: org.w3c.www.protocol.http.HttpException: Connect timed out."

The URL "https://**.*.*.:***/SeeburgerDT/HTTPController?HTTPInterface=rosettanet" provided by Vendor team. i have checkd with the Vendor team and they said the URL works fine from their side and able to receive XML messages from our PI server (we are working on PI7.1.).

Pls suggest why im getting Transmission error in PI RNIF adapter log.

Is it the problem with SSL certificates installed on PI or URL used in RNIF communication channel ?

Please help how to resolve this issue.. i would appreciate your help.

Regards,

Rajesh

[Former Member]

Hi

AS per below two threads:

https://wiki.sdn.sap.com/wiki/display/NWTech/QAforPI-Onestopforall%28Part-1%29

1) Run report 'RSXMB_ACTIVATE_ICF_SERVICES ' in SE38

2) Restart the XI server (both ABAP & JAVA stack)

i perfomred above two steps but still im getting the same error, i hv reinstalled the ssl certificates also on PI server.

some body has idea..how to resolve this error..!!

Regards,

Rajesh

[Former Member]

Hi,

are there any firewalls inbetween that need to be adjusted. Maybe they prevent the connection.

Regards,

Kai

[Former Member]

Hi

there was a problem that ssl certificates date expired..

Now our Vendor team has provided updaetd certificates and our SAP Basis team has deployed on J2EE engine (Keystore View), but when i try to configure ceritificates in Receiver RNIF adapter (communication channel) i dont find the certificates.

RNIF receiver adapter:

Under Authentication i selected Authentication mode 'Certificate Logon'

when i try to select keystore view & keystore entry, the certificates are not shown up in the input help.

when i click on input help it shows the default selection criteria only for the certificates of type 'Private key'.

How can we store the certificates provided by Vendor store in Keystore view as 'Private key type' ?

Ddoes it mean we can configure only the certificates of type 'Private key' in receievr RNIF adapter ?

In case our business partner provides 'Public key' certificates, how can we store them as 'Private key' certi in PI J2EE engine (Is it possible) ?

Regards,

Rajesh

[Former Member]

Hi,

I think you need to contact your basis guys to look into this.

Private keys are used to identify yourself towards other communication party. Public keys of your comm. partner should be set as "trusted" to ensure authentication checks and SSL handshake is done propperly.

ALso check these links:

http://help.sap.com/saphelp_nwpi71/helpdata/en/43/223b0908e13f66e10000000a11466f/content.htm

http://help.sap.com/saphelp_nwpi71/helpdata/en/e3/fc93404f673028e10000000a1550b0/content.htm

[Former Member]

Hi,

we are getting same message.

"Transmitting the message to endpoint https://**.*.*.:**/*********************** using connection RNIFAdapter failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error transmitting the message over HTTP. Reason: java.lang.RuntimeException: Error while silently connecting: org.w3c.www.protocol.http.HttpException: Connect timed out."

-

---

SSL_get_state() returned 0x00001180 "SSLv3 read client certificate A"

[Thr 1085831488] *** ERROR during SecudeSSL_SessionStart() from SSL_accept()==SSL_ERROR_SSL

[Thr 1085831488] SecudeSSL_SessionStart: SSL_accept() failed --

[Thr 1085831488] secude_error 536875074 (0x20001042) = "received a fatal SSLv3 bad certificate alert message from the peer"

[Thr 1085831488] >> -

---

Begin of Secude-SSL Errorstack -

---

>>

[Thr 1085831488] WARNING in ssl3_read_bytes: (536875074/0x20001042) received a fatal SSLv3 bad certificate alert message from the pe

[Thr 1085831488] << -

---

End of Secude-SSL Errorstack -

---

[Thr 1085831488] SSL NI-sock: local=10.1.1.11:51101 peer=210.71.237.26:41004

[Thr 1085831488] <<- ERROR: SapSSLSessionStart(sssl_hdl=102b270)==SSSLERR_SSL_ACCEPT

[Thr 1085831488] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStart returned (-56): SSSLERR_SSL_ACCEPT [icxxconn_mt. 1676]

[Thr 1088473408] Thu Oct 15 07:31:46 2009

[Thr 1088473408] SSL_get_state() returned 0x00001180 "SSLv3 read client certificate A"

[Thr 1088473408] *** ERROR during SecudeSSL_SessionStart() from SSL_accept()==SSL_ERROR_SSL

[Thr 1088473408] SecudeSSL_SessionStart: SSL_accept() failed --

[Thr 1088473408] secude_error 536875074 (0x20001042) = "received a fatal SSLv3 bad certificate alert message from the peer"

[Thr 1088473408] >> -

---

Begin of Secude-SSL Errorstack -

---

>>

[Thr 1088473408] WARNING in ssl3_read_bytes: (536875074/0x20001042) received a fatal SSLv3 bad certificate alert message from the pe

[Thr 1088473408] << -

---

End o

-

---

Could you please let us know how did you resolve the issue?

Thanks inadvance

Regards

Lshriva