cancel
Showing results for 
Search instead for 
Did you mean: 

HTTP Connection to External Server

Former Member
0 Kudos

Hi,

I had some problem with my RFC connection on SM59.

I get this error ICM_HTTP_SSL_ERROR.

I get this error forn dev_icm file

  • = Success -- SapCryptoLib SSL ready!

Thr 3964

Thr 3964 Started service 443 for protocol HTTPS on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)

Thr 3964 Started service 25025 for protocol SMTP on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)

Thr 3964 Tue Jun 15 00:00:02 2010

Thr 3964 *** WARNING => IcmNetCheck: NiHostToAddr(www.doesnotexist.qqq.nxst) took 5 seconds http://icxxman.c 4586

Thr 3964 Tue Jun 15 00:00:07 2010

Thr 3964 *** WARNING => IcmNetCheck: NiAddrToHost(10.0.0.1) took 5 seconds http://icxxman.c 4606

Thr 3964 *** WARNING => IcmNetCheck: 2 possible network problems detected - please check the network/DNS settings http://icxxman.c 4662

Thr 5520 Tue Jun 15 00:01:07 2010

Thr 5520 *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

Thr 5520 session uses PSE file "D:\usr\sap\EHD\DVEBMGS00\sec\SAPSSLDIBS.pse"

Thr 5520 SecudeSSL_SessionStart: SSL_connect() failed --

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

Thr 5520

Begin of Secude-SSL Errorstack

Thr 5520 ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US"

ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete

Thr 5520 <<

-


End of Secude-SSL Errorstack

-


Thr 5520 SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

Thr 5520 SSL NI-sock: local=192.168.42.112:4581 peer=85.236.67.2:443

Thr 5520 <<- ERROR: SapSSLSessionStart(sssl_hdl=0000000002F34BB0)==SSSLERR_SSL_CONNECT

Thr 5520 *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT http://icxxconn.c 2012

*

Any help

Thanks

Accepted Solutions (1)

Accepted Solutions (1)

Former Member
0 Kudos

Hi,

You should split your question in 2 posts to get a chance to make it readable...

Regards,

Olivier

Answers (3)

Answers (3)

Former Member
0 Kudos

Problem is solvet no idea how.

Former Member
0 Kudos

Hi,

It seems that your abap system tries to connect to an HTTPS server whose certiifcate has been signed by a CA authority and a sub CA authority.

You may have forgotten to import the sub CA authority certificate in STRUST ?

Regards,

Olivier

Former Member
0 Kudos

Hi,

I had some problem with my RFC connection on SM59.

I get this error * ICM_HTTP_SSL_ERROR. I get this error forn dev_icm file *

  • = Success -- SapCryptoLib SSL ready!

Thr 3964 ================================================= Any help Thanks

Thr 3964 Started service 443 for protocol HTTPS on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)

Thr 3964 Started service 25025 for protocol SMTP on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)

Thr 3964 Tue Jun 15 00:00:02 2010

Thr 3964 *** WARNING => IcmNetCheck: NiHostToAddr(www.doesnotexist.qqq.nxst) took 5 seconds http://icxxman.c 4586

Thr 3964 Tue Jun 15 00:00:07 2010

Thr 3964 *** WARNING => IcmNetCheck: NiAddrToHost(10.0.0.1) took 5 seconds http://icxxman.c 4606

Thr 3964 *** WARNING => IcmNetCheck: 2 possible network problems detected - please check the network/DNS settings http://icxxman.c 4662

Thr 5520 Tue Jun 15 00:01:07 2010

Thr 5520 *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

Thr 5520 session uses PSE file "D:\usr\sap\EHD\DVEBMGS00\sec\SAPSSLDIBS.pse"

Thr 5520 SecudeSSL_SessionStart: SSL_connect() failed --

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

Thr 5520 >>

-


Begin of Secude-SSL Errorstack

-


>>

Thr 5520 ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US"

ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete

Thr 5520 <<

-


End of Secude-SSL Errorstack

-


Thr 5520 SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

Thr 5520 SSL NI-sock: local=192.168.42.112:4581 peer=85.236.67.2:443

Thr 5520 <<- ERROR: SapSSLSessionStart(sssl_hdl=0000000002F34BB0)==SSSLERR_SSL_CONNECT

Thr 5520 *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT http://icxxconn.c 2012

*

Any help

Thanks

Former Member
0 Kudos

Hi,

Itry agin,

I had some problem with my RFC connection on SM59. I get this error * ICM_HTTP_SSL_ERROR. I get this error forn dev_icm file

Thr 3964 *** WARNING => IcmNetCheck: NiHostToAddr(www.doesnotexist.qqq.nxst) took 5 seconds http://icxxman.c 4586

Thr 3964 *** WARNING => IcmNetCheck: NiAddrToHost(10.0.0.1) took 5 seconds http://icxxman.c 4606

Thr 3964 *** WARNING => IcmNetCheck: 2 possible network problems detected - please check the network/DNS settings http://icxxman.c 4662

Thr 5520 *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

Thr 5520 session uses PSE file "D:\usr\sap\EHD\DVEBMGS00\sec\SAPSSLDIBS.pse"

Thr 5520 SecudeSSL_SessionStart: SSL_connect() failed --

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

Thr 5520 >>

Thanks for any help

Former Member
0 Kudos

Hi,

Looks like your SSL certificate has not been setup properly.

Chk the below link it should help you,

/people/gregor.wolf3/blog/2005/10/11/setup-https-ssl-for-the-sneak-preview-sap-netweaver-04-abap-edition-on-windows

Regards,

Vishnu