HTTPIO_PLG_CANCELED during RFC Test

[former_member184588]

Hello,

I am facing the problem that during RFC Tests for external Systems (httpS-URLs) the HTTPIO_PLG_CANCELED message appears. I have seen several threads that discuss this problem and how to solve it (decrease timeout, change pse passwords, add https service to smicm -> goto -> services) but nothing works.

Logging the SMICM the following messages appear:

[Thr 55908] = using SECUDIR=D:\usr\sap\KGT\DVEBMGS00\sec

[Thr 55908] = secudessl_Create_SSL_CTX(): PSE "D:\usr\sap\ABC\DVEBMGS00\sec\SAPSSLA.pse" not

[Thr 55908] = using PSE "D:\usr\sap\ABC\DVEBMGS00\sec\SAPSSLC.pse" as fallback

[Thr 55908] = Success SapCryptoLib SSL ready!

[Thr 33044] *** ERROR during SecudeSSL_Read() from SSL_read()==SSL_ERROR_SSL

[Thr 33044] session uses PSE file "D:\usr\sap\ABC\DVEBMGS00\sec\SAPSSLC.pse"

[Thr 33044] SecudeSSL_Read: SSL_read() failed

secude_error 1792 (0x00000700) = "wrong or inconsistent padding decrypted"

[Thr 33044] >> Begin of Secude-SSL Errorstack >>

[Thr 33044] ERROR in ssl3_read_bytes: (1792/0x0700) wrong or inconsistent padding decrypted #

ERROR in ssl3_change_cipher_state: (1792/0x0700) wrong or inconsistent padding decrypted #

ERROR in aes_decrypt_end: (1792/0x0700) wrong or inconsistent padding decrypted #

[Thr 33044] << End of Secude-SSL Errorstack

[Thr 33044] SSL NI-sock: local=1.0.0.118:2988 peer=<< Removed >>

[Thr 33044] <<- ERROR: SapSSLRead(sssl_hdl=0000000000600400)==SSSLERR_SSL_READ

[Thr 33044] *** ERROR => IcmReadFromConn(id=1/38): SapSSLRead returned (-58): SSSLERR_SSL_READ [icxxthrio.c 2547]

[Thr 33044] *** ERROR => IcmReadFromConn(id=1/38): read failed (rc = -1) [icxxthrio.c 2619]

[Thr 33044] *** ERROR => IcmHandleNetRead(id=1/38): IcmReadFromConn failed (rc = -1) [icxxthrio.c 1304]

Did someone face the same problem and could tell me how to fix it?

Thanks a lot, Vanessa

Edited by: Rob Burbank on Jan 2, 2012 4:01 PM

[Former Member]

Hi,

It seems to me that your problem is caused by an incompatibility of encryption algorithm between your client SSL certificate and the SSL server you are testing.

I suggest that you increase the tracle level of your ICM to 3 to try to get more meaningful messages.

Regards,

Olivier

[Former Member]

Check which Cypher Algorithm you have choosen when creating the SAPSSLC PSE, RSA or DSA.

I think RSA should be choosen.

Regards,

Olivier

[former_member184588]

Hello and thanks a lot for your answers,

it will still take a couple of days till I can check this. But I am confident that your recommendations will solve the problem.

I am happy to be able to ask all my questions (there are really a lot of them) and get the valuable answers from you as community members. Thanks a lot for this.

Greetings, Vanessa

[Former Member]

Hello Vanessa,

Can you please check the file SAPSSLC.pse exist under D:\usr\sap\ABC\DVEBMGS00\sec? Check file permissions as well.

Thanks,

Siva Kumar

[Former Member]

Hi,

There might be 2 problems.

Thr 33044 session uses PSE file "D:\usr\sap\ABC\DVEBMGS00\sec\SAPSSLC.pse"

Thr 33044 SecudeSSL_Read: SSL_read() failed

the above log shows that there might be a problem with permissions of the file or problem with the content of the file.

Pelase check the permissions and Generate the New PSE.

-Srini

[Former Member]

Hi Venessa,

According to the error message you pasted, looks like something wrong with your PSE file.

Could you please try creating or generating another PSE cerificate & generate credentials.

Thanks,

Sravanthi

[former_member184588]

Hello Sravanthi,

thanks a lot for your valuable answer. I will try it as soon as I find out how to create a new pse.

Greetings, Vanessa

[Former Member]

Hi Venessa,

Please refer to the link below on creating PSE file

http://help.sap.com/saphelp_nw04s/helpdata/en/a6/f19a3dc0d82453e10000000a114084/content.htm

Also refer to the Note 506314 - SAPHTTP and SSL

Thanks,

Sravanthi