SAP HANA Cloud XS SSL certificate error

[csaba_harta3]

Dear All!

We have a problem regarding sending emails via external service provider (office365) from our HANA Cloud XS landscape.

Following error occures and is logged in the xsengine trace:

[15901]{15901}[-1/-1] 2017-02-16 19:25:13.602411 e IpConnection IPConnection.cpp(00196) : comm::engage_ssl failed with rc = 56 | Internal Error Details. Crypto/SSL/CommonCrypto/Engine.cpp:438: SSL handshake failed: SSL error [-1604320766]: No trusted CA list from server, General error: 0xa0600202 | SSL | SSL_connect No trusted CA list from server No trusted CA list from server 0xa0600202 | SSL | ssl3_connect No trusted CA list from server 0xa0600202 | SSL | ssl3_send_client_certificate No trusted CA list from server (ErrCode: -1604320766) [15901]{15901}[-1/-1] 2017-02-16 19:25:13.632658 e IpConnection IPConnection.cpp(00248) : comm::read failed with rc = 15 | [15901]{15901}[-1/-1] 2017-02-16 19:25:13.632665 e XSMail SMTPConnectionHelper.cpp(00080) : Reading the SMTP reply failed with result code -6. [15901]{15901}[-1/-1] 2017-02-16 19:25:13.632669 e XSMail SMTPConnectionHelper.cpp(00042) : Unexpected reply: [15901]{15901}[-1/-1] 2017-02-16 19:25:13.632778 e XSMail SMTPConnection.cpp(00214) : sending EHLO failed after STARTTLS! [15901]{15901}[-1/-1] 2017-02-16 19:25:13.632815 e JavaScript SMTPConnection.cpp(00115) : Couldn't send mail: exception 1: no.2530008 (XSEngine/Connectivity/Smtp/SMTPConnection.cpp:161) error couldn't send EHLO header exception throw location: 1: 0x00007f421ff51420 in xsengine::SMTPConnection::sendEHLO()+0x170 at XSSmtpExceptions.h:28 (libhdbxsapi.so) 2: 0x00007f421ff51641 in xsengine::SMTPConnection::startTLS(ltt::smartptr_handle<Crypto::Configuration>&)+0x160 at SMTPConnection.cpp:212 (libhdbxsapi.so) 3: 0x00007f421ff51e0c in xsengine::SMTPConnection::open()+0x4c8 at SMTPConnection.cpp:304 (libhdbxsapi.so) 4: 0x00007f421ff526b8 in xsengine::SMTPConnection::sendMail(xsengine::Mail&)+0x164 at SMTPConnection.cpp:109 (libhdbxsapi.so) 5: 0x00007f421f65ebe1 in jsvm::SMTPConnection_send(JSContext*, unsigned int, JS::Value*)+0x330 at SMTPConnection.cpp:113 (libhdbjsjm.so) 6: 0x00007f421f7dc665 in js::Invoke(JSContext*, JS::CallArgs, js::MaybeConstruct)+0x181 at jscntxtinlines.h:235 (libhdbjsjm.so) 7: 0x00007f421f7d7133 in Interpret(JSContext*, js::RunState&)+0x7b10 at Interpreter.cpp:2592 (libhdbjsjm.so) 8: 0x00007f421f7dc36d in js::RunScript(JSContext*, js::RunState&)+0xb9 at Interpreter.cpp:420 (libhdbjsjm.so) 9: 0x00007f421f7e3050 in js::ExecuteKernel(JSContext*, JS::Handle<JSScript*>, JSObject&, JS::Value const&, js::ExecuteType, js::AbstractFramePtr, JS::Value*)+0x190 at RootingAPI.h:773 (libhdbjsjm.so) 10: 0x00007f421f7e4cdd in js::Execute(JSContext*, JS::Handle<JSScript*>, JSObject&, JS::Value*)+0x109 at Interpreter.cpp:679 (libhdbjsjm.so) 11: 0x00007f421faab115 in ExecuteScript(JSContext*, JS::Handle<JSObject*>, JS::Handle<JSScript*>, JS::Value*)+0x61 at jsapi.cpp:4089 (libhdbjsjm.so) 12: 0x00007f421faab1f6 in JS_ExecuteScript(JSContext*, JS::Handle<JSScript*>)+0x12 at jsapi.cpp:4111 (libhdbjsjm.so) 13: 0x00007f421f56b08f in jsvm::SandBoxImpl::executeWebRequest(void const*, unsigned int, jsvm::XSExecutionContext const&)+0x5eb at SandBox.cpp:1409 (libhdbjsjm.so) 14: 0x00007f424673886d in xsengine::JsSuffixHandler::handleRequest(ltt::smartptr_handle<httpclient::WebRequest const> const&, ltt::smartptr_handle<httpclient::WebResponse> const&, xsengine::ResourceHandler::Context const&)+0x8d9 at JsSuffixHandler.cpp:77 (libxsengine.so) 15: 0x00007f42467009f4 in xsengine::RequestHandler::handleRequest(ltt::smartptr_handle<xsengine::HttpRequestContext>&, int)+0x36c0 at RequestHandler.cpp:695 (libxsengine.so) 16: 0x00007f4246708e53 in xsengine::RequestJobWrapper::run(Execution::Context&, Execution::JobObject&)+0x40 at RequestHandler.h:77 (libxsengine.so) 17: 0x00007f4221d099d9 in Execution::JobObjectImpl::run(Execution::JobWorker*)+0x1195 at JobExecutorImpl.cpp:1098 (libhdbbasis.so) 18: 0x00007f4221d14c36 in Execution::JobWorker::runJob(ltt::smartptr_handle<Execution::JobObjectForHandle>&)+0x3b2 at JobExecutorThreads.cpp:214 (libhdbbasis.so) 19: 0x00007f4221d174c7 in Execution::JobWorker::run(void*&)+0x1f3 at JobExecutorThreads.cpp:433 (libhdbbasis.so) 20: 0x00007f4221d6fce7 in Execution::Thread::staticMainImp(void**)+0x733 at Thread.cpp:462 (libhdbbasis.so) 21: 0x00007f4221d712d8 in Execution::Thread::staticMain(void*)+0x34 at ThreadMain.cpp:26 (libhdbbasis.so) [15901]{15901}[-1/-1] 2017-02-16 19:25:13.635006 e IpConnection IPConnection.cpp(00229) : comm::write failed with rc = 60 | Internal Error Details. Basis/IO/Stream/impl/NetworkChannel.cpp:1815: Error during stream send: NetworkChannel::sendBlocking. Unexpected stream close, rc=$sysrc$: $sysmsg$ $NetworkChannel$= INVALID [0x00007f41496a2418] {refCnt=2} 10.120.161.229/20435_tcp->132.245.74.98/587_tcp Closed,[----] [15901]{15901}[-1/-1] 2017-02-16 19:25:13.635011 e XSMail SMTPConnectionHelper.cpp(00048) : Sending command failed with 18446744073709551615 bytes sent!

I really do not know why this error message appears: "No trusted CA list from server"

It is really annoying because we want to use the account providing services to customers.

we configured the SMTP settings and also the Trust Store properly (we have an other account where it is working, I cloned the email sending application with all relevant settings and objects).

Do you have any idea?

Thank you in advance,

Csaba

[gregorw]

Hi Csaba,

where you able to find a solution to your described issue? I'm currently facing the same issue.

Best regards
Gregor

[gregorw]

Hi Csaba,

I would think that the SAP Note:

2481536 - Encrypted Outbound Email Communication Via XS Classic Application Does Not Work After Upgr...

should solve your issue.

Best regards
Gregor