I try to set up a connection with an external partner using plain http and an RFC destination of type G.
Unfortunately I receive an ICM_HTTP_SSL_ERROR
Concerning the ICF log i get the following error:
[Thr 7] Tue May 30 16:39:17 2006
[Thr 7] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
[Thr 7] session uses PSE file "/usr/sap/XIE/DVEBMGS17/sec/SAPSSLA.pse"
[Thr 7] SecudeSSL_SessionStart: SSL_connect() failed --
secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"
[Thr 7] >> -
Begin of Secude-SSL Errorstack -
[Thr 7] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed
ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "CN=HeslogRootCA, DC=heslog, DC=lan"
ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete</b>
[Thr 7] << -
End of Secude-SSL Errorstack -
[Thr 7] SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"
[Thr 7] SSL socket: local=10.5.41.120:58771 peer=10.4.21.180:8080
[Thr 7] <<- ERROR: SapSSLSessionStart(sssl_hdl=0x60000000006623d0)==SSSLERR_SSL_CONNECT
[Thr 7] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt.c 1822]
I searched the forum here an I discovered that I need to announce the certificate of the server. I did it using strust.
I guess I am right in the ABAP stack since I use an RFC Destination... (of course I also tried to do it with visual admin and this did not work neither)
Is it correct to upload the certificate from the server at the ssl-server node in strust?
Has anyone some suggestions for me?
Thx in advance!