SAP ERP SSL Client Authentication Failure

[Former Member]

Dear All,

Request your expert insights into the issue that is being currently faced by us for establishing trust in ERP for https communication for HCI C4C integration.

Process followed was:-

1. CA signed certificate was not requested from SAP ERP but the Business already had a certificate signed by the CA which we used to import into STRUST "SSL Client".

2. CA signed certificate used in Step1 is imported in Server Standard as well in STRUST.

3. CA signed certificate used in Step1 is added in Web Dispatcher instead of generating separate certificate.

4. Further we imported HCI root and client certificate into STRUST "SSL Client".

5. Now after doing the basic configuration settings for integration, when we try to do a connection test in SM59, it shows Connection to proxy refused "SSLERR_PEER_CERT_UNTRUSTED" error.

Request insights for further resolution of the issue.

[cris_hansen]

Hi Edison,

If you set the trace level to 2, SAPCRYPTOLIB will show you the certificates that are missing in the PSE. You only need to import them and test the scenario again. I assume your system has SAP_BASIS 7.02 or higher (otherwise you need to restart the ICM process, so it reloads the certificates).

Regards,

Cris

[isaias_freitas]

SSLERR_PEER_CERT_UNTRUSTED

Have you also imported the "root CA certificate" and all the certificates of any intermediate CA?

Regards,

Isaías