ICM_HTTP_SSL_ERROR when calling web service

[tongping]

Summary: ICM_HTTP_SSL_ERROR was met when I called web service in ABAP with logical port & RFC Connection of type G.

Details:

1. the <b>test of RFC Connection of type G in SM59 works OK</b>, with SSL inactive and basic authentication.

2. while <b>in ABAP code, the calling to web service throws ICM_HTTP_SSL_ERROR</b>, using the logical port with the RFC Connection as HTTp Destination.

3. also, with using URL directly in logical port settings, the calling to web service in ABAP throws ICM_HTTP_SSL_ERROR.

I searched threads and blog for ICM_HTTP_SSL_ERROR, it seems others met ICM_HTTP_SSL_ERROR in SM59; while my case is the test in SM59 works well.

Anybody can help?

Thanks and kind regards.

Said

[former_member181959]

Hi,

You can check some info at the ICM trace.

-Goto SMICM tocde

-Goto->Trace File-->Display All

There you can find some information abut it.

Hope this helps.

Prasad Babu.

[tongping]

Hi Prasad,

The problem is gone now! Thank you very much.

2 causes:

the certificate expired and was not set as trusted in the client system.

steps:

1. the old ssl-certificate expired. To resolve this, create a new one refer to the article:

<Enabling SSL and Client Certificates on the SAP J2EE Engine>

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4...

2. get the certificate with accessing the https url; and with the prompt, install the certificate in your local machine.

3. set the certificate as trusted in transaction /nstrust. Refer to Thomas Jung blog:

/people/thomas.jung3/blog/2005/05/13/calling-webservices-from-abap-via-https

4. restart ICM.

to transaction /nsmicm, Menu: Administration >> ICM >> Exit Soft.

Regards,

Said

[Former Member]

Dear Sayid,

The document which you had mentioned here is really helpful.

I'am working on Digital Signature for Form16 in SAP.I stucked up with the same issue.

I went through the document of

Enabling SSL and Client Certificates on the SAP J2EE Engine by Angel Dichev

in that document i went through one note

Note: Per default, the SAP J2EE Engine uses the u201Cssl-credentialsu201D entry for SSL, which contains a

public-key certificate that has been signed by a test CA. Although this certificate can be used for

testing purposes, a certificate that has been signed by a well-known, productive CA should be used

when in production mode.

right now i'am doing it for testing purpose, in the above note it is mentioned that we can use default credentials but when i see the expiry date of this default credentials in my server 1) SSL-Credentials 2)SSL-Credentials-cert it is given that these certificates are Valid Not After 2005 year.

So i got confused now whether to use the default credentials or not.

Please guide me with a solution.

With Regards,

Pradeep.B

[Former Member]

If your certificate has expired, you need to renew it and import the new certificate again.

[tongping]

If you meet the problme, please refer to the summary on 3rd floor of this thread.

[former_member181959]

Hi,

Thank you very much for inputs.

And good job.

Prasad Babu.