ICM_HTTP_SSL error for RFC destinations

960 Views

Hi All, I am trying the connection test for HMRC RFC destination and I am getting the ICM_HTTP_SSL error. The icm trace shows

Thr 2314] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

Thr 2314] session uses PSE file "/usr/sap/PIP/DVEBMGS00/sec/SAPSSLA.pse"

Thr 2314] SecudeSSL_SessionStart: SSL_connect() failedThr 2314] secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"Thr 2314] >> Begin of Secude-SSL Errorstack >>

Thr 2314] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed

Thr 2314] ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "CN=VeriSign Class 3 Public Primary Ce

Thr 2314] ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete

Thr 2314] << End of Secude-SSL Errorstack

Thr 2314] SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

Thr 2314] SSL NI-sock: local=149.170.135.6:49916 peer=157.203.50.169:443

Thr 2314] <<- ERROR: SapSSLSessionStart(sssl_hdl=116d39bd0)==SSSLERR_SSL_CONNECT

Thr 2314] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT {00085b12} [icxxconn_mt.c 1957]

I understand the certificate chain is not valid, but I dont know how to get this fixed.

I followed this post and looks similar to issue I am facing. ICM_HTTP_SSL_ERROR when calling web service

Thanks,

Bharath