IF_HTTP_CLIENT->RECEIVE 1 ICM_HTTP_SSL_ERROR

[Former Member]

Dear,

I have an issue with the SSL connectivity in tcode OAC0.

When I send the certificate it gives me the "Certificate sent succesfully"

When I try to test the connection though, it gives me:

Error in HTTP Access: IF_HTTP_CLIENT->RECEIVE 1 ICM_HTTP_SSL_ERROR

I got a bit stuck on this as all the ssl is configured

Any ideas what to check (or check again)

[former_member188883]

Hi,

When I try to test the connection though, it gives me:
Error in HTTP Access: IF_HTTP_CLIENT->RECEIVE 1 ICM_HTTP_SSL_ERROR

Please check your content server is running or not. Also check in IIS -> properties and ensure full permission is given to all users.

Also check the following link for your issue.

Hope this helps,

Regards,

Deepak Kori

Edited by: deepakkori on Nov 9, 2011 8:23 PM

[Former Member]

more information on this issue:

[Thr 5016] >> -

---

Begin of Secude-SSL Errorstack -

---

>>

[Thr 5016] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (27/0x001b) Chain of certificates is incomplete : "CN=Certificate Manager, OU=Active HS e-Servi

ERROR in get_path: (27/0x001b) Found root certificate of <CN=Certificate Manager, OU=Active HS e-Services, O=***, L=Ap

ERROR in verify_with_PKs: (27/0x001b) Found root certificate of <CN=Certificate Manager, OU=Active HS e-Services, O=***, L=Ap

[Thr 5016] << -

---

End of Secude-SSL Errorstack -

---

[Thr 5016] SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

[Thr 5016] SSL NI-sock: local=<SAP IP adress>:3619 peer=<server IP adres>:8090

[Thr 5016] <<- ERROR: SapSSLSessionStart(sssl_hdl=000000000055B930)==SSSLERR_SSL_CONNECT

[Thr 5016] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn.c 2031]

[Thr 5384] Wed Nov 09 11:24:00 2011

[Thr 5384] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

[Thr 5384] session uses PSE file "E:\usr\sap\***\DVEBMGS00\sec\SAPSSLC.pse"

[Thr 5384] SecudeSSL_SessionStart: SSL_connect() failed --

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

[Thr 5384] >> -

---

Begin of Secude-SSL Errorstack -

---

>>

[Thr 5384] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

ERROR in af_verify_Certificates: (27/0x001b) Chain of certificates is incomplete : "CN=Certificate Manager, OU=Active HS e-Servi

ERROR in get_path: (27/0x001b) Found root certificate of <CN=Certificate Manager, OU=Active HS e-Services, O=****, L=Ap

ERROR in verify_with_PKs: (27/0x001b) Found root certificate of <CN=Certificate Manager, OU=Active HS e-Services, O=****, L=Ap

[Thr 5384] << -

---

End of Secude-SSL Errorstack -

---