Quantcast
Channel: SCN : All Content - Process Integration (PI) & SOA Middleware
Viewing all articles
Browse latest Browse all 7030

Problem with SSL Certificates after system restart

$
0
0

Hello,

 

we are facing this issue after system restart:

 

[Thr 20561] >>            Begin of Secude-SSL Errorstack            >>

[Thr 20561] 0x20001047   SAPCRYPTOLIB   SSL_accept

[Thr 20561] SSL API error

[Thr 20561] received a fatal SSLv3 illegal parameter alert message from the peer

[Thr 20561] 0xa0600267   SSL   ssl23_accept

[Thr 20561] received a fatal SSLv3 illegal parameter alert message from the peer

[Thr 20561] 0xa0600267   SSL   ssl3_read_bytes

[Thr 20561] received a fatal SSLv3 illegal parameter alert message from the peer

[Thr 20561] <<            End of Secude-SSL Errorstack

[Thr 20561]   SSL NI-sock: unix domain socket="/tmp/.sapicm44103"

[Thr 20561] <<- ERROR: SapSSLSessionStart(sssl_hdl=11e208250)==SSSLERR_SSL_ACCEPT

[Thr 20561] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStart returned (-56): SSSLERR_SSL_ACCEPT [icxxconn_mt. 1701

[Thr 19533]   SSL_get_state() returned 0x00001180 "SSLv3 read client certificate A"

[Thr 19533] *** ERROR during SecudeSSL_SessionStart() from SSL_accept()==SSL_ERROR_SSL

[Thr 19533]    session uses PSE file "/usr/sap/SK4/DVEBMGS03/sec/SAPSSLS.pse"

[Thr 19533] SecudeSSL_SessionStart: SSL_accept() failed

[Thr 19533]   secude_error 536875079 (0x20001047) = "SSL API error"

 

and after trying to replace library:

 

[Thr 8739] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_CONNECTION_LOST

[Thr 8739]    session uses PSE file "/usr/sap/SK4/DVEBMGS03/sec/SAPSSLC.pse"

[Thr 8739] No Secude Error present in trace stack!

[Thr 8739]   SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

[Thr 8739]   SSL NI-sock: local=10.217.10.74:39236  peer=10.217.10.153:44400

[Thr 8739] <<- ERROR: SapSSLSessionStart(sssl_hdl=11dc9add0)==SSSLERR_SSL_CONNECT

[Thr 8739] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT {00021cd4} [icxxconn_mt.c 1977]

 

In the DEV system, there is no error and in PROD we don´t have new library yet.

We tried to regenerate certificates, restarted ICM, restarted webdispatcher, replaced the library, but  Note 1094342 is useless.

This error disappeared in log dev_icm on application server, but on db still appears and we have an error in web browser.

 

Could you help, please?

 

Thank you in advance.


Viewing all articles
Browse latest Browse all 7030

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>