SAP Knowledge Base Article - Preview

3007243 - Error retrieving certificates after changing SSLContext.properties file

Symptom

  • You have configured a REST Receiver Adapter integration in SAP Process Integration (PI) or SAP Process Orchestration (PO)
  • As part of this integration, it was necessary to make amendments to the SSLContext.properties file e.g. for Server Name Indication (SNI) or other such requirements as per SAP Note 2284059 Update of SSL library within NW Java server
  • When testing the integration, the error below is thrown in Communication Channel Monitoring
    Message processing failed. Cause: com.sap.aii.adapter.rest.ejb.security.SSLException: SSL-enabled call failed. Error while configuring SSL client Error retrieving certificates:
    Error while processing outbound message. SSL-enabled call failed. Error while configuring SSL client Error retrieving certificates:
  • Checking the XPI Inspector trace and/or the defaultTrace entries similar to below can be seen:
    Error retrieving certificates

    15:34:00:371   ~nnel.Error retrieving certificates: Catching java.security.GeneralSecurityException: Error retrieving certificates:
    at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.generateSSLContentxt(IAIKSocketFactory.java:156)
    at com.sap.aii.adapter.rest.ejb.security.IAIKSocketFactory.<init>(IAIKSocketFactory.java:48)
    at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.initalizeSSLfactory(RESTReceiverChannel.java:228)
    at com.sap.aii.adapter.rest.ejb.receiver.RESTReceiverChannel.getSecureSocketFactory(RESTReceiverChannel.java:213)...
    ...at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:302)
    Caused by: java.lang.IllegalArgumentException: Error loading config file: java.lang.Throwable: Cannot read config file "/usr/sap/<SID>/SYS/global/security/lib/tools/SSLContext.properties"!
    at iaik.security.ssl.SSLContext.<init>(SourceFile:725)


Read more...

Environment

  • SAP NetWeaver
  • SAP Process Integration

Product

SAP NetWeaver all versions ; SAP Process Integration all versions

Keywords

Process Integration, PI, Process Orchestration, PO, NetWeaver, XI, AEX, REST Adapter, TLS 1.2 , KBA , BC-XI-CON-RST , Rest Adapter , BC-JAS-SEC-CPG , Cryptography , BC-XI-CON-AFW-SEC , Security , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.