Solved: iaik.security.ssl.SSLException: Peer Sent alert: A...

Former Member · ‎10-12-2009

Hi All,

While accessing a HR portal link we are getting this error:

iaik.security.ssl.SSLException: Peer Sent alert: Alert Fatal: bad certificate

When we checked the ssl_service in visual admin---> keystore we found two entries one for credentials and other for credentials-cert , entry for credentials has got expired on march 2009 while enty in credentials shows that it is valid till march 2011.User is accessing the j2ee server through proxy server.

We are not sure whether its a proxy server error or ssl certificate error in our j2ee engine. How to check whether SSL has been configured in our j2ee server???

Please guide me to resolve this issue. I have also checked the iaikSecurityFS component through SDM n its showing under Filesystem-->coretools.

How to test the SSL functionality, user is getting this error while accessing on MSS link.

We have tested the SSL connection using htts://localhost:50501. Test was successfull.

After the test we could see the start page of java server.

Regards,

Prashant

Edited by: Prashant Shukla on Oct 12, 2009 4:19 PM

former_member227283 · ‎10-20-2009

Hi Prashant,

Pls follow the attatched link PDF for resolving your ADS error.

http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f03414f8-d4ce-2a10-d4b6-ab201b329...

Pls follow the step 3 & 4 , which will help you to check you configuration.

Thanks

Anil

former_member227283 · ‎10-20-2009

Hi Prashant,

Log says ADS error as well as SSL error in remote execution .

Can you desrcibe some , how is your landscape i.e ESS , EP , WEBdisp .

Is there any java dynpro in you EP MSS which is calling ADS

Pls maintain your complete profile in SDN you communication id.

Thanks

Anil

Edited by: Anil Bhandary on Oct 20, 2009 2:31 PM

former_member227283 · ‎10-20-2009

Hi,

Pls paste the dev_webdisp log , which is present on sap webdispatcher

location :- \usr\sap\<SID>\W<NN>\work\dev_webdisp

Thanks

Anil

former_member227283 · ‎10-20-2009

Hi prashant,

Can you paste default.trc of Portal & dev_webdisp in forum.

Let first slove the problem of SSL and then we will get into second problem of ADS

Thanks

Anil

former_member227283 · ‎10-20-2009

Hi Prashant,

In our production system i checked the parameter icm/server_port<xx>

icm/server_port_0 = PROT=HTTP,PORT=6201
icm/server_port_1 = PROT=HTTPS,PORT=6301
icm/server_port_2 = PROT=SMTP,PORT=0

Are we using end to end ssl?? or something other kind of ssl.

Are you using any proxy for EP as like sap webdispatcher , if yes pls paste me the parameter of instance profile of sap webdispatcher for answering your above question.

Depend upon that we can work on error which you are getting.

-

Regading the ADS error.

fp_test_00 is user to check the ADS of abap part , but for java part you need to check the ADS configuration , pls follow the below forum for ADS on EP.

/message/7800668#7800668 [original link is broken]

Thanks,

Anil

Edited by: Anil Bhandary on Oct 20, 2009 12:22 PM

former_member227283 · ‎10-20-2009

Hi Prashant,

1. Can Paste the URL which you are using for access the portal , need to check teh format.

2. How to check parameter icm/server_port<xx>

I have checked the parameter icm/server_port<xx> in the instance profile but couldnot find the same.What does this mean???

goto to Tcode :- SMICM --> select GOTO menu --> under goto PARAMETERS --> select DISPLAY.

Where you will get new screen , in that you will be get the pramater icm/server_port_<nn> ( nn is you instance number )

3. ADS error

1) The causing exception is nested. 
*EXCEPTION {1}#2#*sap.com/mss~rec~req/RequisitionCreation#*
com.sap.tc.webdynpro.clientserver.adobe.pdfdocument.base.core.
PDFDocumentRuntimeException: Failed to UPDATEDATAINPDF at com.sap.tc.webdynpro.
clientserver.uielib.adobe.impl.InteractiveForm.afterHandleActionEvent(InteractiveForm.
*java:420)**

For the above ADS error , tell us did you made post installation acitivty for ADS .

Error you are getting is because your is not proper funcioning. check the post installtion activity of ADS

Thanks

Anil

Former Member · ‎10-19-2009

Hi,

Inorder to check whether ur system has been configured to SSL chk the following steps ya.

First go to visual admin and navigate to SSL Provider service and select SSL and u will get displayed with

2 keys ya.

one is PUBLIC KEY and the other one is PRIVATE KEY

Here chk whether u are able to see your host name along with the certificate provider vendor name in SSL_CERT ya

By default SAP provides the license for 8 weeks as free of cost but for extention period the company has to pay to SAP.

You can chk the time period whether it is for 8 weeks (or) for 1year.

Second go to SMICM and go to services and here chk whether the https port is enabled (or) not.

Third simple one go and open a IE page with HTTPS:/<hostname>:<portno> and chk whether u are able to get the data displayed.

Let me know if you are not satisfied with my statements and I will try to let u know more.

Prashanth.

former_member227283 · ‎10-13-2009

Hi RAghu,

1. check parameter as mention by RAGHU. ( find it out whether it is end to end SSL or terminating ssl )

2. If it is end to end SSL then you have to reissue the certificate of backend system as well as check on web dispatcher what is the validity date of certificate if it is also expired, then you have to also reissue the certificate of web dispatcher.

3. IF you are using End to end SSL, then you have to work on webdispatcher for re-issue of certificate for the error which you are getting ( iaik.security.ssl.SSLException: Peer Sent alert: Alert Fatal: bad certifica ).

The error which you are getting it seems that you are using END TO END SSL & not terminating SSL.

pls let me know any query,.

Thanks

Anil

former_member227283 · ‎10-12-2009

Hi Prashant,

Which proxy server component you are using for e.g web dispatcher , IIS , etc. ??

How is you communication between j2ee server & proxy server i.e http or https ( end to end ssl or terminating ssl ) ??

Thanks

Anil

iaik.security.ssl.SSLException: Peer Sent alert: Alert Fatal: bad certifica

Accepted Solutions (1)

Accepted Solutions (1)

Answers (8)

Answers (8)

Re: ADT Data Preview pobug when selecting columns

Re: Send Keys on Windows / SAP / saving pdf file

EWM Picking based on route or ship-to party

Re: How to upload an image to Document Information...

Re: Transcation codes in S4HANA