ICM_HTTP_SSL_ERROR

[Former Member]

Hi,

When I check the RFC DUECLNT800-HTTP connection from backend system called IDE in tcode sm59 to the SCL, I get the ICM_HTTP_SSL_ERROR.

The RFC is created by the Wizard. Here are info from the RFC:

RFC Destination: DUECLNT800-HTTP

COnnect Type: G - HTTP Connection to External Serv

Description: HTTP Destination to SCL Server.

TAB: Technical Settings:

Target System Settings:

Target Host: NNNNNNNNNNNN.XXXXX.COM - Service No. 8011 => HTTP Port

Path Prefix: /sap/bc/srt/pm/iwcnt/actionitemvi_document/800/duet_enterprise_assertion/1/binding_t_http_a_http__-iwcnt_-actionitemvi_document_duet_enterprise_assertion

TAB: Logo & Security:

Seurity Options:

Logon Procedure: Basic Authentication (Yes) - Send SAP Logon Ticket (YES)

Status of Secure Protocol:

SSL: Active

SSL Client Certificate: ANNONYM SSL CLIENT (ANONYMOUS)

-

---

Further analyses of the SMICM Log:

[Thr 5008] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

[Thr 5008] session uses PSE file "E:\usr\sap\IDE\DVEBMGS01\sec\SAPSSLA.pse"

[Thr 5008] SecudeSSL_SessionStart: SSL_connect() failed

secude_error 536871970 (0x20000422) = "SSL record with the wrong SSLPlaintext.version received"

[Thr 5008] >> Begin of Secude-SSL Errorstack >>

[Thr 5008] ERROR in ssl3_get_record: (536871970/0x20000422) SSL record with the wrong SSLPlaintext.version received #

[Thr 5008] << End of Secude-SSL Errorstack

[Thr 5008] SSL_get_state() returned 0x00002120 "SSLv3 read server hello A"

[Thr 5008] No certificate request received from Server

[Thr 5008] <<- ERROR: SapSSLSessionStart(sssl_hdl=00000000025FFD20)==SSSLERR_SSL_CONNECT

[Thr 5008] <<- SapSSLErrorName()==SSSLERR_SSL_CONNECT

[Thr 5008] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn.c 2031]

[Former Member]

I don't understand why people say, "Okay. I solved it, but I'm not going to tell you how."

Can you please share how you solved this issue? There's no point in saying "I solved it" otherwise.

Thank you.

[Former Member]

Hi,

I'm also having the same error ("SSL record with the wrong SSLPlaintext.version received"). But it has worked before. I've re-imported the certificates but still the same.

Can anyone help?

[Former Member]

Found the reason. Closed

[Former Member]

Hi Tariq,

We are facing the same error as above, request you to kindly share the solution for the same.

Thanks

Hemang

Edited by: Basis Satyam on May 24, 2011 7:39 PM