SAP Knowledge Base Article - Preview

2807709 - J2EE GRMG checks > Web Services Status showing red due to HTTPS Peer certificate rejected by ChainVerifier

Symptom

The Web Services Status is showing red as in image below:

GRMG.png

In the defaultTrace (/usr/sap/<SID>/<InstID>/j2ee/cluster/serverX/log/defaultTrace*.trc) the following exception can be seen:

#2.0#<timestamp>#<timezone>#Error#com.sap.engine.httpdsrclient.protocol.instrumented.https##BC-JAS-WEB#tc~bl~dsrhttpclient#<Exception ID>#<Unix timestamp>#sap.com/com.sap.engine.heartbeat#com.sap.engine.httpdsrclient.protocol.instrumented.https#Guest#<Exception ID 2>#<Exception ID 3>#Thread[HTTP Worker [@<thread ID>],5,Dedicated_Application_Thread]#Plain##Cannot establish connection to URL https://<FQDN>:<HTTPS Port>/GRMGWSTest/service?wsdl. Ensure that you have maintained valid server certificates for this URL in the trust store. See also note 2479773.
[EXCEPTION]
org.w3c.www.protocol.http.HttpException: Peer certificate rejected by ChainVerifier
iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
at iaik.security.ssl.y.a(SourceFile:932)
at iaik.security.ssl.n.b(SourceFile:1066)
at iaik.security.ssl.n.a(SourceFile:1503)
at iaik.security.ssl.y.d(SourceFile:784)
at iaik.security.ssl.SSLTransport.startHandshake(SourceFile:569)
at iaik.security.ssl.SSLTransport.getOutputStream(SourceFile:648)
at iaik.security.ssl.SSLSocket.getOutputStream(SourceFile:391)
at org.w3c.www.protocol.http.HttpBasicConnection.a(SourceFile:463)
at org.w3c.www.protocol.http.HttpBasicServer.getConnection(SourceFile:449)
at org.w3c.www.protocol.http.HttpBasicServer.runRequest(SourceFile:1211)
at org.w3c.www.protocol.http.HttpManager.runRequest(SourceFile:1191)
at org.w3c.www.protocol.http.HttpURLConnection.connect(SourceFile:322)
at com.sap.engine.httpdsrclient.protocols.instrumented.https.DSRHttpsURLConnection.connect(DSRHttpsURLConnection.java:91)
at org.w3c.www.protocol.http.HttpURLConnection.a(SourceFile:178)
at org.w3c.www.protocol.http.HttpURLConnection.getInputStream(SourceFile:550)
at com.sap.engine.httpdsrclient.protocols.instrumented.https.DSRHttpsURLConnection.getInputStream(DSRHttpsURLConnection.java:123)
at com.sun.org.apache.xerces.internal.impl.XMLEntityManager.setupCurrentEntity(XMLEntityManager.java:675)
at com.sun.org.apache.xerces.internal.impl.XMLVersionDetector.determineDocVersion(XMLVersionDetector.java:148)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:806)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:771)
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:243)
at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:339)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:197)
at com.sap.security.hardener.xml.parsers.HardenedDocumentBuilder.parse(HardenedDocumentBuilder.java:145)
at com.sap.engine.services.webservices.tools.SharedDocumentBuilders.parse(SharedDocumentBuilders.java:185)
at com.sap.engine.services.webservices.tools.SharedDocumentBuilders.loadDOMDocument(SharedDocumentBuilders.java:281)
at com.sap.engine.services.webservices.espbase.wsdl.WSDLLoader.load(WSDLLoader.java:100)
at com.sap.engine.services.webservices.espbase.wsdl.WSDLLoader.load(WSDLLoader.java:74)
at com.sap.engine.services.webservices.espbase.client.jaxws.core.SAPServiceDelegate.loadWSDLDefinitions(SAPServiceDelegate.java:220)
at com.sap.engine.services.webservices.espbase.client.jaxws.core.SAPServiceDelegate.<init>(SAPServiceDelegate.java:128)
at com.sap.engine.services.webservices.espbase.client.jaxws.cts.CTSProvider.createDelegate(CTSProvider.java:179)
at com.sap.engine.services.webservices.espbase.client.jaxws.cts.CTSProvider.createServiceDelegate(CTSProvider.java:160)
at javax.xml.ws.Service.<init>(Service.java:77)
at com.sap.engine.heartbeat.grmg.ws.client.GRMGWSTest.<init>(GRMGWSTest.java:17)
at com.sap.engine.heartbeat.ServerGRMGApplication.testWebServices(ServerGRMGApplication.java:415)
at com.sap.engine.heartbeat.ServerGRMGApplication.processComponents(ServerGRMGApplication.java:161)
at com.sap.engine.heartbeat.ServerGRMGApplication.doPost(ServerGRMGApplication.java:93)


Read more...

Environment

  • SAP Solution Manager
  • SAP NetWeaver

 

Product

SAP NetWeaver all versions ; SAP Solution Manager 7.2

Keywords

GRMG heartbeat webserviecs j2ee check https certificate chain rejected peer ChainVerifier , KBA , BC-JAS-ADM-MON , Monitoring , BC-ESI-WS-JAV-RT , Runtime , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.