Skip to Content
avatar image
Former Member

Error ICM in HTTPS connection in CRM

Hello,

I'm facing an problem when the user login on the CRM WEBUI using HTTPS protocol. The user use BCM to receive the calls from a 0800 number and the BCM software communicates with the CRM filling the customer's informations. When the user use HTTP protocol, the informations fills, but when the user use the HTTPS protocol, she can login (using a certificate or/and login manually), but the customer's informations don't fills.

I already update the certificate from BCM to CRM (in the STRUST).

My parâmeters for HTTPS in RZ10 is:

icm/HTTPS/verify_client 2

icm/server_port_2 PROT=HTTPS,PORT=443$$

ssl/ssl_lib C:\usr\sap\CRP\DVEBMGS00\exe\sapcrypto.dll

sec/libsapsecu C:\usr\sap\CRP\DVEBMGS00\exe\sapcrypto.dll

ssf/ssfapi_lib C:\usr\sap\CRP\DVEBMGS00\exe\sapcrypto.dll

SMICM it's ok.

In the ICM logs i see a error (Atached on file erro_ICM_CHELEB_CERTIFICADOS).

CANOPUS, in the ICM logs error, is a virtual host that have two apps, in server CHELEB and CHERTAN, but the ICM errors appears only in CHELEB server. This is the CRM landscape.

Can you tell me if i need to do any configuration in CRM side? Or its like a infrastructure problem?

Thanks in advanced!!!!

Cleiton Folster Eli

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

4 Answers

  • Nov 10, 2015 at 02:40 AM

    Hi,

    Does the issue can be reproduced every time ?

    please reproduce this issue and attach the complete level 2 ICM trace .

    Best regards,

    Shi Feng

    Add comment
    10|10000 characters needed characters exceeded

  • Nov 10, 2015 at 05:34 PM

    Hi Cleiton

    Kindly refer the SAP Note to enable the ICM trace check the error log.

    1318906 - Trace analysis of SSL problems

    Regards

    SS

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 12, 2015 at 06:50 PM

    Hello Cleiton,

    The issue is that your client is not sending a certificate to your server... as you have set icm/HTTPS/verify_client = 2, the server will only proceed if a client certificate is sent.

    Therefore, set icm/HTTPS/verify_client = 1 and see if the issue persists. If it does, please look at your client side (BCM) and ensure that a valid certificate is being sent to CRM.

    Best Regards,
    Guilherme de Oliveira
    SAP Active Global Support

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 16, 2015 at 05:59 PM

    Hello guys,

    Thanks for reply.

    The logs is to big (6 mb)!

    One of the error is WARNING in ssl3_read_bytes: (536875072/0x20001040) received a fatal SSLv3 handshake failure alert message from the pe, the note 1318906 - Trace analysis of SSL problems says

    that the client rejects the certificate that is sent by ICM. Its mean the CRM is rejecting the BCM server certificate, its alrigth to say?

    @Guilherme,

    I try to set the parameter icm/HTTPS/verify_client from 2 to 1 in rz11 (this parameter is dynamic), but the problem still happens.

    Looking the error in ICM logs I think there is an problem with any certificate, but i already update the certificate from BCM to CRM in STRUST, i think i have forgetting some configuration! Have any place to check about this certificate problem?

    Thanks all for the help!

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi Amerjit,

      I will set this parameter as mentioned (ssl/client_ciphersuites=914:HIGH:MEDIUM:+e3DES). I need to talk with the customer to restart the system and i return soon as possible.

      Thanks for the help!

      Cleiton Folster Eli.