iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure

[shashi_patan]

Hi,

I am using receiver rest adapter and getting below error:

MP: exception caught with cause java.io.IOException: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: handshake failure

I have imported server certificate(root and intermediate) into Trusted CAs.

Please help!

Channel ping:

[former_member104145]

Solution identified for this error?

[marksmyth]

Hello

Refer to 2821477 Guided Answers - SSL Connection Problems in Process Integration/Orchestration Receiver Adapters.

- use ssllabs to verify the security requirements of the target host you are connecting to (SSL Server Test (Powered by Qualys SSL Labs))
- refer to note 2708581 ECC Support for Outbound Connections in SAP NW AS Java. Assuming your system already has the required code levels in place and based on findings from ssllabs report, you will most likely need to amend the sslContext.properties file as documented in Example 3.

Also refer to note 2616423 SSL does not work between PI and Remote System - SSLException: Peer sent alert: Alert Fatal: handshake failure.

Regards
Mark

[former_member708563]

Hi..

Can you pls share the solution?

I am also facing the same issue?

[Bhargavakrishna]

Hi Shashi,

• I suggest you to test endpoint with Postman and check if the request is reaching the endpoint or not.
• Ping the target host-name or IP address from your PI server and check the connectivity.
• Create "HTTP destination" and ping the destination.
• Check the TLS version in SAP PO and target system.
  
• Refer SAP note 2110020 tells us that protocols TLSv1.1 and TLSv1.2 are not enabled by default for outgoing connections (client side).

Regards

Bhargava Krishna

[arrezende]

Hi Shashi, how are you?

Try import the public key of the server url in trusted CA.

Generally that’s error occurs when a certificate wasn’t imported.

[shashi_patan]

Hi Alexa,

Thank you for your reply.

I have imported it already all three certificate. root, intermediate and server certificate.