Processing error in ICM when receiving response from WebService

[Former Member]

Hi!

I have configured a scenario which involves consuming a web service over HTTPS.

When trying to test the proxy I get the error: <b>SRT: Processing error in Internet Communication Framework: ("ICF Error when receiving the response: ICM_HTTP_SSL_ERROR</b>.

I have looked for solutions in here, but so far no luck. A lot of similar errors but they are all related to SM59 connection, which is fine in my case.

Looks like it has something to do with my certificate (imported from the web service), but I am not able to figure out what it is...

dev_icm says:

[Thr 5596] Thu May 03 15:39:47 2007
[Thr 5596] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
[Thr 5596]    session uses PSE file "C:SAPNSPDVEBMGS00secSAPSSLS.pse"
[Thr 5596] SecudeSSL_SessionStart: SSL_connect() failed --
  secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"
[Thr 5596] >> ---------- Begin of Secude-SSL Errorstack ---------- >>
[Thr 5596] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed 
 
ERROR in af_verify_Certificates: (27/0x001b) Chain of certificates is incomplete : "OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US"
 
ERROR in get_path: (27/0x001b) Found root certificate of <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> which does not fit the given PKRoot 
 
ERROR in verify_with_PKs: (27/0x001b) Found root certificate of <OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US> which does not fit the given PKRoot 
 
[Thr 5596] << ---------- End of Secude-SSL Errorstack ----------
[Thr 5596]   SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"
[Thr 5596]   SSL socket: local=192.168.17.106:2950  peer=153.110.169.1:443
[Thr 5596] <<- ERROR: SapSSLSessionStart(sssl_hdl=02946F48)==SSSLERR_SSL_CONNECT
[Thr 5596] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT {00010007} [icxxconn.c 2005]

Anyone have any ideas? All help appreciated!

Thanks.

regs Ole

[athavanraja]

i have never tried this, but did you import the certificate into ABAP system (txn STRUSTSSO2)

which version of NSP you are using 8 or the latest one (11?)

if 8 it had some problem. you need to change the following profile parameters.

from

ssf/ssfapi_lib = $(DIR_CT_RUN)sapsecu.dll

sec/libsapsecu = $(DIR_CT_RUN)sapsecu.dll

to

ssf/ssfapi_lib = $(DIR_CT_RUN)\sapsecu.dll

sec/libsapsecu = $(DIR_CT_RUN)\sapsecu.dll

Raja