SOAP Receiver with SSL Certificate

[Former Member]

Hi,

We are implementing SOAP Reveiver Scenario with SSL Certificate, and we are getting following response:

<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>

- <!--

 Inbound Message 

-->

- <SAP:Error SOAP:mustUnderstand="1" xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/">

<SAP:Category>XIAdapterFramework</SAP:Category>

<SAP:Code area="MESSAGE">GENERAL</SAP:Code>

<SAP:P1 />

<SAP:P2 />

<SAP:P3 />

<SAP:P4 />

<SAP:AdditionalText>com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier</SAP:AdditionalText>

<SAP:Stack />

<SAP:Retry>M</SAP:Retry>

</SAP:Error>

We have imported certifcates and CA in NWA Certificates and Keys.

It seems to be ok the configuration but connection in Receiver is refused because of certificate?

Any help¿

Thanks in advance.

Best Regards.

Silvia.

[Former Member · Accepted solution]

Hi Silvia,

This message shows that either your certificate invalid or or expired or not using the certificate. So target system throws this error. You import the target system's certificate in the java stack or abap stack to fix this error.

• The problem might be at your configuration side, Please check  your WSDL URL configured in the soap receiver channel? 
• whether you use http or https in the URL field?
• please checked certificate authentication

Best Regards,

Sagarika

[Former Member · Accepted solution]

Hi Sagarika,

I have https in url field.

Thanks.

[Former Member · Accepted solution]

Hi Silvia,

In general different IP address and port for HTTP and HTTPS. Can you please check whether you are using the IP address and port for HTTPS.

Best Regards,

Sagarika

[Former Member · Accepted solution]

Yes, there are correct.

Tahks

[Former Member · Accepted solution]

Hi Silvia,

Check the Adapter-Specific Message Attributes in the receiver adapter.

Please find the below url http://help.sap.com/saphelp_nw70/helpdata/en/29/5bd93f130f9215e10000000a155106/content.htm which will be helpful for you.

Best Regards,

Sagarika

[Former Member · Accepted solution]

For what I need Adapter Specific Atributes¿?

[Former Member · Accepted solution]

Hi Silvia,

To process adapter attributes in the message header of the XI message, set the Use Adapter-Specific Message Attributes indicator.

Please have a look to the url http://help.sap.com/saphelp_nw70/helpdata/en/29/5bd93f130f9215e10000000a155106/content.htm for more details.

Best Regards,

Sagarika

[Former Member]

HI Silvia,

As you have re-imported the certificate, please check the below points:

1. Check the expiration of the certificate.

2. Also, check the Keystore view & Keystore values provided in NWA/VA and need to have same in SOAP adapter communication channel.

3. Check the username and password provided.

What is the SOAP protocol used to configure the interface?

[srikanth_srinivasan3]

Hello Silvia,

Connection Reset issues can be caused by both parties. In other words, incorrect request or connection killed by client. One commonly found problem is that the size of data being transmitted over the underlying protocol. Invesitagting the problem from there can help a bit.

-

Srii

[baskar_gopalakrishnan2]

I think the problem could be due to order of installing the certificates or expiration.  Basically the order is own->intermediate->root.   You might want to see the ciao's reply on this thread.

http://scn.sap.com/thread/1817976

Hope this might be helpful

[Former Member]

Hi Baskar,

I've reimported certificates in order you said, and know I get:

<SAP:AdditionalText>com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: Failed to get the input stream from socket: java.net.SocketException: Connection reset</SAP:AdditionalText>

<SAP:Stack />

Thanks.

[baskar_gopalakrishnan2]

This error is totally different from the previous error. The connection reset error is due to network connection-> for example firewall rules for port opening -> not established between your PI server and target system.  Please take help from Basis.

[naveen_chichili]

Hi Silvia,

Please check the below note for the same issue.

Note 1394546 - Socket and connection issues in Java Web services

[naveen_chichili]

Hi Silvia,

certificate is generated with fully qualified host name or IP?

if the certificate is generated with fully qualified host name you have to use the same...

Regards,

Naveen.

[Former Member]

Hi Naveen,

If I put the hostname in order to IP in Communication Channel, I get:

com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: Communication over HTTPS. Unable to create a socket

[naveen_chichili]

Hi Silvia,

please check if the host name/IP is added in your DNS settings at your OS level.

this will also create some problem some times.

also you can try to re create the certificate and do some dummy changes-->activate the channel and then check.

Regards

Naveen.