Invalid SSL message (SOAP Adaptor)

[former_member907760]

Hi All,

We have configured our PI 7.1 system to send payment messages to our business partner through its HTTPS URL using SOAP adapter, hence while testing we are getting the following error message; I'll appriciate if anyone can give his/her expert advice on this:

"Delivering the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: iaik.security.ssl.SSLException: Invalid SSL message, too long: 24790."

We used HTTP only but is not working????

Regards,

[former_member907760]

Thanks a lot for your replay.

In the Cert. Storage and in the Keystore view i could not find 'Partner Cert' .

It might deleted it by our Basis .

[former_member907760]

Hi,

I believe that you have a different version.

The steps for PI 7.1 as the following:

SAP NetWeaver Administrator

choose Configuration Management

Certificates and Keys

But what we need to check now. Because we have many keys installed in the PI.

BR,

[Former Member]

Hi

The listed steps are of PI 7.1 based And you can see there are multiple ways of getting this place.

anyways, once you are in certificate store, please choose 'Partner Cert' and then check if you have the public key of your external/3rd party system imported or not? If not yet ...Please import the public key certificate.

Regards

Sekhar

[former_member907760]

Yes he is using J2EE_ADMIN ...

[Former Member]

Hi,

okay....before we see why your basis consultant not able to see the certificates tab, please check if the public certificate has been imported into Key Store. steps to check

SAP NetWeaver Administrator

choose Configuration Management

Security Management

Key Storage.

PartnerCert

Import Certificate here by choosing 'Import Entry'. If it's already imported please cross verify.

Regards

Sekhar

[former_member907760]

Thanks for your replay.

He followed same steps but we found only the following tabs.

General Information

Account Information

Contact Information

Additional Information

Assigned Roles

Assigned Groups

User Mapping for System Access

I believe that we need to configure some parameters before this step.

[Former Member]

hi

It's so unfortunate;

- The 'Certificates' tab is right after 'Additional Information' tab.

- I presume your Basis Consultant using J2EE_ADMIN userID credentials to login to NWA

- Or the ID being used has all authorizations.

Regards

Sekhar

[former_member907760]

Thanks a lot.

But the basis adminj could not find "certification tap".

thanks again.

[former_member907760]

Thanks a lot.

Our BASIS Consultant said "Enabling SSL for J2EE is not for sending . Only for reciving".

But we are sending to our vendor and then we got the error message.

Is our BASIS Cons. correct or no???

Please advise.

Best Regards,

[Former Member]

Hi Lamia,

Ask your Basis Consultant to add public key certificate for XIISUSER/ PIISUSER by following below sequence of steps

1. Login to NWA

2. Click on 'Configuration Management -> Identity Management

3. In the 'Search Criteria' select 'User' 'All Data Sources' - Search for XIISUSER or PIISUSER (based on your configuration)

4. Select the User

5. Click on 'Modify'

6. Click on 'Certificates' tab

7. Browse the Certificate and Click on 'Upload Certficate'

This ensure that, the IS is aware of the certificate details.

I hope this will address your issue if not Please let me know.

Regards

Sekhar

[Former Member]

hi Lambia,

Basis Consultant, used NWA or Visual Administrator?

If you are using NWA then the steps that i listed exactly the same that you need to follow.

When you select the user 'XIISUSER/piisuser'; The bottom of the screen shows multiple tabs and certficates tab is one among them.

Thanks

Sekhar

[Former Member]

Hi Abo,

For SSL on SOAP, you need to enable SSL on J2EE. If you are using HTTPS, you need to enable SSL on ABAP engine using STRUST. Either use HTTP adapter with HTTPS facility or enable SSL on J2EE and then use SOAP adapter.

chk this links :

http://help.sap.com/saphelp_nw04/helpdata/en/02/6d5c034c182e4fbe7bfd25c2b56f9b/frameset.htm

http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4...

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/23894238-0701-0010-40b0-a0a6d5c4...

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d024ca8e-e76e-2910-c183-8ea4ba68...

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/23894238-0701-0010-40b0-a0a6d5c4...

Regds,

pinangshuk.