SAP hana cloud connector- 417 Could not download configuration file: 400 — Bad Request

[cperdomo]

I am trying to set up Initial configuration for SAP HANA Cloud connector on my desktop using hanatrial.ondemand.com and https://localhost:8443/ I get an error message: 417 Could not download configuration file: 400 — Bad Request
I have found several notes, but try another type of error
2450005 - authorization
2739308 - timeout
2460641 - proxy configuration

The solution to the error 400 of bad request I can not find it

I can notice that the hosts of the trial account do not ping, and those of the other regions do, is this normal?
"ping connectivitynotification.hanatrial.ondemand.com" does not work
"ping connectivitycertsigning.hanatrial.ondemand.com" does not work
"ping connectivitytunnel.hanatrial.ondemand.com" does not work

but if I place directly in the browser:
https://connectivitycertsigning.hanatrial.ondemand.com:443/certificate/management/v1/trusted/ca/acco..., then if it works

a fraction of the ljs_trace.log file:

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:836)|
2019-04-03 21:32:32,339 -0500#INFO#com.sap.scc.ui#http-bio-8443-exec-7# #Proxy update not required - no changed detected|
2019-04-03 21:32:33,666 -0500#WARN#com.sap.scc.config#http-bio-8443-exec-7# #Creating an sslContextProvider for account p13752958trial@hanatrial.ondemand.com without SSLContext. Keystore did not contain a certificate.|
2019-04-03 21:32:47,909 -0500#INFO#com.sap.scc.security#http-bio-8443-exec-7# #New RSA keypair was generated. Key size used 4096, time 14148 ms|
2019-04-03 21:32:47,909 -0500#INFO#com.sap.scc.security#http-bio-8443-exec-7# #Will retrieve Connectivity CA certificate from SAP Cloud Platform|
2019-04-03 21:32:47,910 -0500#INFO#com.sap.scc.security#http-bio-8443-exec-7# #Executing Http Get request to https://connectivitycertsigning.hanatrial.ondemand.com:443/certificate/management/v1/trusted/ca/acco...
2019-04-03 21:32:48,567 -0500#INFO#com.sap.scc.security#http-bio-8443-exec-7# #Returned Http Response with code 400|
2019-04-03 21:32:48,569 -0500#WARN#com.sap.scc.rt#http-bio-8443-exec-7# #Tunnel account:///p13752958trial is inoperative. SccEndpoint com.sap.scc.config.TunnelSccEndpoint@7e78d36c ok, and context == null|
2019-04-03 21:32:48,736 -0500#ERROR#com.sap.scc.ui#http-bio-8443-exec-7# #SCC handshake failed: 400 — Bad Request
com.sap.scc.servlets.SccHandshakeException: SCC handshake failed: 400 — Bad Request
at com.sap.scc.cert.HttpCertificateManagementService.processRequest(HttpCertificateManagementService.java:139)
at com.sap.scc.cert.HttpCertificateManagementService.executeGetRequest(HttpCertificateManagementService.java:93)
at com.sap.scc.cert.HttpCertificateManagementService.getConnectivityAgentCA(HttpCertificateManagementService.java:64)


Thanks,

[cperdomo]

Hi Antal,

Thanks for your answer,

I need to inform the administrator of the network, what to do to solve the proxy problem, so I ask which port to activate (443, 8443) or any additional configuration.

According to trace file, i think the error is when accesing the address

connectivitycertsigning.hanatrial.ondemand.com:443

Thanks,

[AntalP]

Hi Carlos,

CONNECT refused by proxy: HTTP / 1.0 400 Bad Request

this message comes from the proxy server, please contact your local network administrator to find out why the proxy rejects the connect request.

Best regards,

Antal

[cperdomo]

Hi Barnadásnk

Thanks for your answer

I activate the debugg in the in the trace and i think if its a problem with the proxy

DEBUGG # org.apache.http.impl.excecchain.MainClientExec # http-bio-8443-exec-7 #CONNECT refued by proxy: HTTP / 1.0 400 Bad Request

I read the note 2377425 - What ports need to be opened in a firewall for connection with SAP Cloud Connector and what IP Addresses at SAP does it connrct to?

- The network has access to the host of Europe Trial

- Do i have to open port 433 and 8443?

- The port used for https proxy connection of subaccount is 8000, what configuration should this port have?

- Some other configuration that i have to consider?

Thanks,

ljs-trace-resume.txt

[oppancs]

Dear Carlos,

It seems the problem is indeed with some proxy settings. From the current logs it is not sure but an assumption. You need debugged trace to find out the reason.

Please go through the troubleshooting/reolution part of the KBA: 2697152 - Adding Neo subaccount to SAP Cloud Connector fails - SCC handshake failed: 403 — Forbidden.

I guess you will see similar log entires in the ljs_trace:

#DEBUG#org.apache.http.impl.client.DefaultHttpClient#http-bio-8443-exec-7# #CONNECTrefused by proxy: HTTP/1.1 400 Bad Request|

But investigation should be continued based on the resulted debugged logs.

Best Regards,
Barnabás Paksi