SAP Knowledge Base Article - Preview

2538934 - ECDHE cipher suites handshake failure

Symptom

  • You try to call a Web Service using https prococol and SSL/TLS.
  • From XPI Inspector Example 50 --> XI Channels --> Verify Remote SSL Server Certificate
    You get  the following error message - Begin IAIK Debug:
    ssl_debug(7): Starting handshake (iSaSiLk 5.104)...
    ssl_debug(7): Sending v3 client_hello message to test.example.it:443, requesting version 3.3...
    ssl_debug(7): Received alert message: Alert Fatal: handshake failure
    ssl_debug(7): SSLException while handshaking: Peer sent alert: Alert Fatal: handshake failure
    ssl_debug(7): Shutting down SSL layer...
    ssl_debug(7): Closing transport...

  • From XPI Inspector Example 50 all traces
    Failed to get the input stream from socket: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
    [EXCEPTION]
    iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
    at iaik.security.ssl.y.f(SourceFile:414)
    at iaik.security.ssl.n.b(SourceFile:730)
    at iaik.security.ssl.n.a(SourceFile:1501)
    at iaik.security.ssl.y.d(SourceFile:784)
    at iaik.security.ssl.SSLTransport.startHandshake(SourceFile:571)
    at iaik.security.ssl.SSLTransport.getInputStream(SourceFile:658)
    at iaik.security.ssl.SSLSocket.getInputStream(SourceFile:395)
    at com.sap.aii.af.sdk.xi.net.HTTPClientConnection.getInputStream(HTTPClientConnection.java:1364)
    at com.sap.aii.af.sdk.xi.net.HTTPClientConnection.call(HTTPClientConnection.java:638)
    at com.sap.aii.af.sdk.xi.net.HTTPClientConnection.post(HTTPClientConnection.java:351)
    at com.sap.aii.af.sdk.xi.srt.CallerServiceImpl2.call(CallerServiceImpl2.java:256)
    at com.sap.aii.af.sdk.xi.srt.TransportBubble.onMessage(TransportBubble.java:47)
    at com.sap.aii.af.sdk.xi.srt.ExtensionBubble.onMessage(ExtensionBubble.java:56)
    at com.sap.aii.adapter.soap.ejb.XISOAPAdapterBean.callBubbleSequenceReceiver(XISOAPAdapterBean.java:1110)

Read more...

Environment

  • PI Release Independent
  • SAP NetWeaver
  • SAP Process Integration

Product

SAP NetWeaver all versions ; SAP Process Integration all versions

Keywords

Process Integration 7.0, PI 7.0, PI 7.01, PI 7.02, Process Integration 7.10, PI 7.10, Process Integration 7.11, PI 7.11, Process Integration 7.30, PI 7.30, Process Integration 7.31, PI 7.31, Process Orchestration 7.40, PI 7.40, PO 7.40, Process Orchestration 7.50, PI 7.50, PO 7.50, NetWeaver, XI, ECDHE, NWA, keystore, CA , KBA , BC-XI-CON-AFW-SEC , Adapter Framework Security , BC-JAS-SEC-CPG , Cryptography , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.