Skip to Content
0

Connect ERP with Ariba Direct Connectivity

Jul 04, 2017 at 06:12 PM

417

avatar image

As soon as he tried to make a connection test to the Ariba site I get the following error

Already set the rfc and the Ariba portal ssl

Regards

screenshot-1.png (9.9 kB)
10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Manoj K Jul 06, 2017 at 01:54 PM
0

Pablo,

Hope you have downloaded the latest Ariba certificates from : https://connect.ariba.com/ACgo/1,,169928,00.html?bypass=1

and Have downloaded in STRUST under SSL CLIENT (Anonymous) . After doing this go go SICM and restart you ICM and check once.

Br,

Manoj

Show 15 Share
10 |10000 characters needed characters left characters exceeded

Manoj,

On that page not found my client s1-eu.. ssl but the download with firefox.

Are already loaded on the strust ssl

-s1-eu.ariba...

-s1.Ariba..

Regards

0

Hi Pablo,

I hope you have downloaded the completed chain certificate in strust ssl ; The root , intermediate and the leaf certificate.

And also please check if ICM parameter is enabled to support https. Please do ICM restart once u have imported the SSL chain cert. If you are still facing the issue please raise the trace level and provide the log.

Troubleshooting SSL

Br,

Manoj

cert.png (10.1 kB)
1

Manoj,

ICM Paramaters

STRUST - Anonymous

The log HTML

HTTP/1.0 500 Native SSL error..Date: Fri, 07 Jul 2017 16:40:12 GMT..Server: SAPNetWeaver Application Server..Connection: close..SAP-ICMCLNTERROR:407..SAP-ICMERRORDETAIL: SSL%20handshake%20with%20s1-eu.ariba.com%3a443%20failed%3a%20SSSLERR_CONN_CLOSED%20(-10)%0aRemote%20Peer%20has%20closed%20the%20network%20connection%0a%0aSapSSLSessionStartNB()%3d%3dSSSLERR_CONN_CLOSED%0a%0a..Content-Length: 1995 ..Content-Type: text/html... .

........ SAP NetWeaver Application Server.. Help..http://help.sap.com/">Help..> .. .. .. .. ..

.. .. .. ..

500 Native SSL error


..SSLhandshake with s1-eu.ariba.com:443 failed: SSSLERR_CONN_CLOSED (-10)


Remote Peer has closed thenetwork connection..SapSSLSessionStartNB()==SSSLERR_CONN_CLOSED..
.. .. Error: -14 .. Version: 7450 .. Component: ICM .. Date/Time: Fri Jul 07 11:40:12 2017. .. Module: icxxconn.c .. Line: 2272 .. Server: .. .. Error Tag: {0000009d} .. ..

.. ..

.. http://www.sap.com/">© 2001-2015, SAP AG .. .. ..

SOA MANAGER LOG

Regards

screenshot-1.png (8.6 kB)
screenshot-2.png (10.9 kB)
screenshot-3.png (11.0 kB)
screenshot-4.png (40.0 kB)
0

It looks like all settings are fine not sure why you still have this error. And i believe you have already restarted ICM after importing certificate .i recently implemented SSL connection with s1.ariba.com with SHA2 certificate but that was through PI -mediated connectivity.

I believe you already have the correct certificate . But however SSL handshake error can occur due to certificate error or it may be due to mismatching SSL/TLS version . If i remeber correctly Ariba supports both TLS 1.1 and 1.2 currently. As they wont end the TLS 1.1 at end of this September.

Found these however:

s1-eu.ariba.com public certificate is there in : https://connect.ariba.com/AC_Content_Details_Page/1,,2_167947,00.html

Setting up SSL in ABAP engine : SAP note : 510007 - Setting up SSL on Application Server ABAP

Br,

Manoj

1

It has something to do that it may not have access to the site?

ssl-error.png (29.0 kB)
0

You have mentioned the URL wrong you have 2 forward '/' Before Buyer .Please correct it and check . and i don't think it has to do something with access as you are getting SSL exception.

0
Show more comments

Pablo,

You are not supposed to use URL : https://s1-eu.ariba.com/Buyer/fileupload?realm=<xyz> via Browser as this uses PUT/GET operation to upload the file.

If you want to use it from browser you may use https://s1-eu.ariba.com/Buyer/Main?realm=<xyz>.

Additional check this link for your issue : https://connect.ariba.com/AC_Content_Details_Page/1,,161_171865,00.html

Br,

Manoj

1

Manoj,

Perform the following test but obtained the same result. I use postman.Regards
ssl-error.png (29.0 kB)
https-ariba.png (33.9 kB)
0

Hi Pablo,

I personally have never tried to invoke these services via external tool like postman/soap ui but ideally it should work . but looking so far at your issue i still have a belief that this is something go to do with the SSL thing as you are able to hit the server .

Have you raised SR for Ariba support for this ? Any inputs from them ?

Br,

Manoj

0

Manoj,

Even if it does not raise an SR, the ssl is v3 and if I understand correctly in my web server (jdk 8) should have the protocol tls 1?

Best regards

screenshot-1-1.png (10.6 kB)
0

Hi Pablo,

I remember Ariba is upgrading to TLS v 1.2 i.e but i had got some info from ariba team that they would continue to support TLS V1.1 till Sep 09 2017 .

But your error clearly says the handshake has failed and there are no hello messages exchanged . So if possible i would suggest you to upgrade your JCE library to support TLS V1.2 not sure how that is done at ECC end.

But before doing this it better to raise a service request to ariba support team to confirm on SSL/TLS version they currently support.

Br,

Manoj

0

Doing a test to the site of above marks the following.

screenshot-3.png (56.0 kB)
0
Show more comments

Manoj,

the tool is Portecle.

Regards

0