SAP (Documents/Screen shots/Complete Solution): [sap-basis] J2ee Server SSL Certificate Expired

Question from sambzz on May 27 at 10:07 AM

Dear All,

We are setting up digital signature for FORM 16, since ADS SSL connection
is mandatory we have setup ADS SSL and when we test ADS_HTTPS RFC from
our ABAP system, we get the following error

[Thr 1543] Sat May 26 16:41:58 2012
[Thr 1543] *** ERROR during SecudeSSL_SessionStart() from
SSL_connect()==SSL_ERROR_SSL
[Thr 1543] session uses PSE file
"/usr/sap/QAS/DVEBMGS00/sec/SAPSSLSOAP.pse&quo t;
[Thr 1543] SecudeSSL_SessionStart: SSL_connect() failed --
secude_error 9 (0x00000009) = "the verification of the server's
certificate chain failed"
[Thr 1543] >> ---------- Begin of Secude-SSL Errorstack ---------- >>
[Thr 1543] ERROR in ssl3_get_server_certificate: (9/0x0009) the
verification of the server's certificate chain failed
ERROR in af_verify_Certificates: (101/0x0065) Certificate expired
(notbefore=031002072500Z, notafter=051002072500Z, verifyTime=120526111158Z)
ERROR in af_check_validity_of_Certificate: (101/0x0065) Certificate
expired (notbefore=031002072500Z, notafter=051002072500Z,
verifyTime=120526111158Z)
[Thr 1543] << ---------- End of Secude-SSL Errorstack ----------
[Thr 1543] SSL_get_state() returned 0x00002131 "SSLv3 read server
certificate B"
[Thr 1543] SSL NI-sock: local=10.3.3.87:64456 peer=10.3.3.88:50001
[Thr 1543] <<- ERROR:
SapSSLSessionStart(sssl_hdl=110d4e870)==SSSLERR_SS L_CONNECT
[Thr 1543] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed
(-57): SSSLERR_SSL_CONNECT {00010071} [icxxconn_mt.c 2031]

It seems from above log that SSL certificate for j2ee server has
expired , now we want to renew the SSL certificate and should be self
signed so let us know what need to be done for renewing SSL certificate
as self signed.

Regards,
Rajesh Kumar

Reply to this email to post your response.

__.____._

Manage Settings | Unsubscribe | Create FAQ | Send Feedback