Error in Adapter OData - SSLHandshakeException

[former_member521371]

Recently my integration is having some issue with OData adapter.

Here is the error when I execute my integration:

Bellow are the images of my Communication Channel:

Any ideas on how to solve this problem?

[TomXing · Accepted solution]

Hi Jonathan,

1. OData adapter seems to be using JDK for SSL handshake, instead of using IAIK lib.
   Notice the error: "javax.net.ssl.SSLHandshakeException"
   And, very likely, SSL handshake failed as SF turned off TLS 1.0.
2. This would be very similar to SFSF adapter then, as outlined by below SAP KBA:
   2677047 - Error in PI SuccessFactors Adapter after TLS 1.0 disabled
3. In XPI Inspector trace - communication channel connection test, it's only using IAIK, regardless what adapter type is used, whether JDK or IAIK is used, or any parameter set.
   You can use it to verify certificates though.

Best regards,
Tom

[former_member521371 · Accepted solution]

Thanks for the help Tom.

Note 2677047 solved my problem.

[former_member366655]

Hi Jonathan,

Few points from my end:

1. Recently SF has updated its SSL Certificates. Take a look at SAP Note 2533915. Try importing respective certificate and test.

2. Is there any TLS upgrade recently at PI?

3. Please provide screenshot of your module configuration too.

Regards,

Vivek Jain

[former_member521371]

Hi Vivek.

1. I've tried to import and use this certificates but the error remain the same.

2. No, and here we have other integrations using TLS 1.0 and 1.2 working.

3.

Below are some prints of a log from XPI_Inspector generated yesterday:

Thanks for the quick response.

[former_member366655]

Hi Jonathan,

Thanks for the details.

I would suggest you to please configure the Certificate in Channel too , then restart the channel and then test. Also , please go through below blogs once if these help:

https://blogs.sap.com/2015/12/10/using-xpi-inspector-to-troubleshoot-http-ssl-connections/

https://blogs.sap.com/2016/02/16/using-xpi-inspector-to-troubleshoot-http-ssl-connections-part-2-cli...

Regards,

Vivek Jain