SRT Framework exception: Service Ping ERROR

[Former Member]

Hi,

I am trying to create logical port for the service consumer, but when I tried to ping the connection, it throws an error as :

SRT Framework exception: Service Ping ERROR: Error when calling SOAP Runtime functions: SRT: Processing error in Internet Communication Framework: ("SSL handshake with www.lmslogistics.com:443 failed: SSSLERR_PEER_CERT_UNTRUS

The webservice is using https and it is working find in Soap UI 5.0. I have tried to search every resources but no luck, hope someone can give me an idea.

Kindly help.

Regards,

Reid

[Former Member]

Hi Lee,

  I guess you were able to solve this issue. Could you please let me know the resolution as I am facing same error.

Thanks,

Sarat

[Former Member]

Hello Lee ,

If you are using a HTTP destination to connect to third party?

Can you please check SSL is active?

Thanks.

[Former Member]

Any idea you can find from the log file?

[Thr 140637380912896] *** ERROR => SSL handshake with www.lmslogistics.com:443 failed: SSSLERR_PEER_CERT_UNTRUSTED (-102)

[Thr 140637380912896] The peer's X.509 Certificate (chain) is untrusted

[Thr 140637380912896]

[Thr 140637380912896] SapSSLSessionStart()==SSSLERR_PEER_CERT_UNTRUSTED

[Thr 140637380912896]   SSL:SSL_connnect() failed  (536872221/0x2000051d)

[Thr 140637380912896]   => "SSL API error"

[Thr 140637380912896] >>      SecuSSL ErrStack:

[Thr 140637380912896] 0x2000051d   SAPCRYPTOLIB   SSL_connect

[Thr 140637380912896] SSL API error

[Thr 140637380912896] Failed to verify peer certificate. Peer not trusted.

[Thr 140637380912896] 0xa0600203   SSL   ssl_verify_peer_certificates

[Thr 140637380912896] Peer not trusted

[Thr 140637380912896] 0xa0600297   SSL   ssl_cert_checker_verify_certificates

[Thr 140637380912896] peer certificate (chain) is not trusted

[Thr 140637380912896] PropertyBlock:

[Thr 140637380912896]   Status      :Not successful

[Thr 140637380912896]   Profile     :1.3.6.1.4.1.694.2.2.2.2

[Thr 140637380912896]   SignerStatus:Not successful

[Thr 140637380912896]   SignerVerificationResult:

[Thr 140637380912896]     element#no="1":

[Thr 140637380912896]       Status      :Not successful

[Thr 140637380912896]       Validity    :Successful

[Thr 140637380912896]       BasicConstraints:Successful

[Thr 140637380912896]       KeyUsage    :Successful

[Thr 140637380912896]       ObjectStatus:Not successful

[Thr 140637380912896]       SignerCert:

[Thr 140637380912896]         Certificate:

[Thr 140637380912896]             Subject     :CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/reposito

[Thr 140637380912896]         Verification result:

[Thr 140637380912896]           Status      :Not successful

[Thr 140637380912896]           Profile     :1.3.6.1.4.1.694.2.2.2.2

[Thr 140637380912896]           SignerStatus:Not successful

[Thr 140637380912896]           SignerVerificationResult:

[Thr 140637380912896]             element#no="1":

[Thr 140637380912896]               Status      :Not successful

[Thr 140637380912896]               Validity    :Successful

[Thr 140637380912896]               BasicConstraints:Successful

[Thr 140637380912896]               KeyUsage    :Successful

[Thr 140637380912896]               ObjectStatus:Not successful

[Thr 140637380912896]               SignerCert:

[Thr 140637380912896]                 Certificate:

[Thr 140637380912896]                     Subject     :CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsd

[Thr 140637380912896]                 Verification result:

[Thr 140637380912896]                   Status      :Not successful

[Thr 140637380912896]                   Profile     :1.3.6.1.4.1.694.2.2.2.2

[Thr 140637380912896]                   SignerStatus:Not successful

[Thr 140637380912896]                   SignerVerificationResult: None

[Thr 140637380912896]

[Thr 140637380912896] <<

[Thr 140637380912896]   SSL:SSL_get_state()==0x2131 "SSLv3 read server certificate B"

[Thr 140637380912896]   SSL NI-hdl 561: local=10.244.30.198:41699  peer=10.248.52.105:80

[Thr 140637380912896]   cli SSL session PSE "/usr/sap/BZA/DVEBMGS00/sec/SAPSSLA.pse"

[Thr 140637380912896]   Target Hostname="www.lmslogistics.com"

[Thr 140637380912896]

[Thr 140637380912896]  {000b79ef} [icxxconn.c 2005]

[iaki_vila]

Hi Lee,

According with the exception, the problem seems to be in the certification installation. Have you restart the ICM after the certificate installation?.

Regards.

[Former Member]

Hi,

Appreciate your prompt reply.

I am not really sure about the certification installation because my main role is abap consultant. Is that any way I can check if there is certification installed?

Thanks.

[iaki_vila]

He Lee,

Check the certificate like this doc pointerd in the transaction STRUSTSSO2:

Hope this helps.

Regards.

[Former Member]

Hi Inaki,

My user do not have the authorization to go into the transaction STRUSTSSO2. However when I go into SMICM I can see there is Active HTTPS port configured. Btw, the client is using proxy to connect to the system, could it be proxy blocking the connection?

Thanks.

[iaki_vila]

Hi Lee,

I don't think the problem will be a firewall or a proxy issue, another exception would be raised. In my opinion, the problem seems to be in a certificate or authentication issue.

Have you increased the ICM trace level in order to check the exception in the trace logs?

Regards.

[Former Member]

Hi Inaki,

I have tried to increase to trace level to level 2, but how can I generate the log file? Is it Ping the connection through soamanager? Or testing through the service consumer test by sending request?

Thanks!

Regards,

Reid