2621598 - HTTPS changeover with TLS 1.2 for Elster scenarios | SAP Knowledge Base Article

SAP Knowledge Base Article - Preview

2621598 - HTTPS changeover with TLS 1.2 for Elster scenarios

Symptom

You have followed the advice from SAP Note 2588955 - ELSTER UStVA: Changeover of the transfer to HTTPS and you are preparing the change from HTTP to HTTPS in your Elster scenarios.

You have changed the 4 SOAP receiver channels for the Elster scenarios from using HTTP to HTTPS. After changing the channels, you notice the following errors in Message Monitor:

Failed to call the endpoint: Error in call over HTTP: HTTP 0 null
Call failed: java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
Error occurred: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
exception caught with cause {0} com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure
java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure

You collect an XPI Inspector trace and see the following error for all 4 clearing houses:

ssl_debug(54): Starting handshake (iSaSiLk 5.104)...
ssl_debug(54): Sending v3 client_hello message to datenannahme4.elster.de:443, requesting version 3.3...
ssl_debug(54): Sending extensions: renegotiation_info (65281), signature_algorithms (13), server_name (0)
ssl_debug(54): Received alert message: Alert Fatal: handshake failure
ssl_debug(54): SSLException while handshaking: Peer sent alert: Alert Fatal: handshake failure
ssl_debug(54): Shutting down SSL layer...
ssl_debug(54): Closing transport...


Read more...

Environment

  • PI Release Independent
  • SAP NetWeaver
  • SAP Process Integration

Product

SAP NetWeaver 7.0 ; SAP NetWeaver 7.1 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP NetWeaver Process Integration 7.1 ; SAP enhancement package 1 for SAP NetWeaver 7.0 ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 1 for SAP NetWeaver Process Integration 7.1 ; SAP enhancement package 2 for SAP NetWeaver 7.0 ; SAP enhancement package 3 for SAP NetWeaver 7.0

Keywords

Process Integration 7.0, PI 7.0, PI 7.01, PI 7.02, Process Integration 7.10, PI 7.10, Process Integration 7.11, PI 7.11, Process Integration 7.30, PI 7.30, Process Integration 7.31, PI 7.31, Process Orchestration 7.40, PI 7.40, PO 7.40, Process Orchestration 7.50, PI 7.50, PO 7.50, NetWeaver, XI, Administration Report Electronic Data Transmission to Authorities, Electronic VAT return, 070089007, TLS 1.2, TLSv1.2, SSLv3.3, handshake failure, Peer sent alert, Alert Fatal: handshake failure, SSLException, Peer certificate rejected by ChainVerifier , KBA , BC-XI-CON-ELS , HR/FI Elster Module for PI , BC-JAS-SEC-CPG , Cryptography , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.