SAP Knowledge Base Article - Preview

2807709 - J2EE GRMG checks > Web Services Status showing red due to HTTPS

Symptom

The Web Services Status is showing red as in image below:

GRMG.png

In the defaultTrace (/usr/sap/<SID>/<InstID>/j2ee/cluster/serverX/log/defaultTrace*.trc) the following exception can be seen:

#2.0#<timestamp>#<timezone>#Error#com.sap.engine.httpdsrclient.protocol.instrumented.https##BC-JAS-WEB#tc~bl~dsrhttpclient#<Exception ID>#<Unix timestamp>#sap.com/com.sap.engine.heartbeat#com.sap.engine.httpdsrclient.protocol.instrumented.https#Guest#<Exception ID 2>#<Exception ID 3>#Thread[HTTP Worker [@<thread ID>],5,Dedicated_Application_Thread]#Plain##Cannot establish connection to URL https://<FQDN>:<HTTPS Port>/GRMGWSTest/service?wsdl. Ensure that you have maintained valid server certificates for this URL in the trust store. See also note 2479773.
[EXCEPTION]
org.w3c.www.protocol.http.HttpException: Peer certificate rejected by ChainVerifier
iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
at iaik.security.ssl.y.a(SourceFile:932)
at iaik.security.ssl.n.b(SourceFile:1066)
at iaik.security.ssl.n.a(SourceFile:1503)
at iaik.security.ssl.y.d(SourceFile:784)
at iaik.security.ssl.SSLTransport.startHandshake(SourceFile:569)
at iaik.security.ssl.SSLTransport.getOutputStream(SourceFile:648)
at iaik.security.ssl.SSLSocket.getOutputStream(SourceFile:391)
at org.w3c.www.protocol.http.HttpBasicConnection.a(SourceFile:463)
at org.w3c.www.protocol.http.HttpBasicServer.getConnection(SourceFile:449)
at org.w3c.www.protocol.http.HttpBasicServer.runRequest(SourceFile:1211)
at org.w3c.www.protocol.http.HttpManager.runRequest(SourceFile:1191)
at org.w3c.www.protocol.http.HttpURLConnection.connect(SourceFile:322)
at com.sap.engine.httpdsrclient.protocols.instrumented.https.DSRHttpsURLConnection.connect(DSRHttpsURLConnection.java:91)
at org.w3c.www.protocol.http.HttpURLConnection.a(SourceFile:178)
at org.w3c.www.protocol.http.HttpURLConnection.getInputStream(SourceFile:550)
at com.sap.engine.httpdsrclient.protocols.instrumented.https.DSRHttpsURLConnection.getInputStream(DSRHttpsURLConnection.java:123)
at com.sun.org.apache.xerces.internal.impl.XMLEntityManager.setupCurrentEntity(XMLEntityManager.java:675)
at com.sun.org.apache.xerces.internal.impl.XMLVersionDetector.determineDocVersion(XMLVersionDetector.java:148)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:806)
at com.sun.org.apache.xerces.internal.parsers.XML11Configuration.parse(XML11Configuration.java:771)
at com.sun.org.apache.xerces.internal.parsers.XMLParser.parse(XMLParser.java:141)
at com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:243)
at com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderImpl.parse(DocumentBuilderImpl.java:339)
at javax.xml.parsers.DocumentBuilder.parse(DocumentBuilder.java:197)
at com.sap.security.hardener.xml.parsers.HardenedDocumentBuilder.parse(HardenedDocumentBuilder.java:145)
at com.sap.engine.services.webservices.tools.SharedDocumentBuilders.parse(SharedDocumentBuilders.java:185)
at com.sap.engine.services.webservices.tools.SharedDocumentBuilders.loadDOMDocument(SharedDocumentBuilders.java:281)
at com.sap.engine.services.webservices.espbase.wsdl.WSDLLoader.load(WSDLLoader.java:100)
at com.sap.engine.services.webservices.espbase.wsdl.WSDLLoader.load(WSDLLoader.java:74)
at com.sap.engine.services.webservices.espbase.client.jaxws.core.SAPServiceDelegate.loadWSDLDefinitions(SAPServiceDelegate.java:220)
at com.sap.engine.services.webservices.espbase.client.jaxws.core.SAPServiceDelegate.<init>(SAPServiceDelegate.java:128)
at com.sap.engine.services.webservices.espbase.client.jaxws.cts.CTSProvider.createDelegate(CTSProvider.java:179)
at com.sap.engine.services.webservices.espbase.client.jaxws.cts.CTSProvider.createServiceDelegate(CTSProvider.java:160)
at javax.xml.ws.Service.<init>(Service.java:77)
at com.sap.engine.heartbeat.grmg.ws.client.GRMGWSTest.<init>(GRMGWSTest.java:17)
at com.sap.engine.heartbeat.ServerGRMGApplication.testWebServices(ServerGRMGApplication.java:415)
at com.sap.engine.heartbeat.ServerGRMGApplication.processComponents(ServerGRMGApplication.java:161)
at com.sap.engine.heartbeat.ServerGRMGApplication.doPost(ServerGRMGApplication.java:93)


Read more...

Environment

 SAP Solution Manager 7.2

Product

SAP Solution Manager 7.2

Keywords

  GRMG heartbeat webserviecs j2ee check https certificate chain rejected peer ChainVerifier , KBA , BC-JAS-ADM-MON , Monitoring , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.