File Adapter FTP SSL SSL Certificate Exception

After reviewing the results of searching on this error, I do not find anything that fits my situation:
SAP File Adapter (PI 7.1) using FTP with FTPS connection security.
I am not using X.509 certificate for client authentication.
My connection is using a non-public certificate.
I have added the SSL certificate to TrustedCAs and DEFAULT keystores.
I am getting the following error:
Message processing failed. Cause: com.sap.engine.interfaces.messaging.api.exception.MessagingException: Error when getting an FTP connection from connection pool: com.sap.aii.af.lib.util.concurrent.ResourcePoolException: Unable to create new pooled resource: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
Since I am using an non-public certificate, it will not validate. Even adding to the TrustedCAs and DEFAULT keystore it seems the configuration is still attempting to validate the certificate.
Any recommendations?

Hi,
The main reasons for this error are:
1. The correct server certificate could not be present in the TrustedCA
keystore view of NWA. Please ensure you have done all the steps
described in these two URLs:
Security Configuration at Message Level
http://help.sap.com/saphelp_nwpi71/helpdata/EN/ea/c91141e109ef6fe1000000
0a1550b0/frameset.htm
2. The server certificate chain contains expired certificate. Check for
it (that was the cause for other customers as well) and if it's the case
renew it or extend the validation.
3. Some other people have reported similar problem and mainly the
problem was that the certificate chain was not in correct
order. Basically the server certificate chain should be in order
Own->Intermedite->Root. To explain in detail, if your server certificate
is A which is issued by an intermediate CA B and then B's certificate is
issued by the C which is the root CA (having a self signed certificate).
Then your certificate chain contains 3 elements A->B->C. So you need to
have the right order of certificate in the chain. If the order is B
first followed by A followed by C, then the IAIK library used by PI
cannot verify the server as trusted. Please generate the certificate in
the right order and then import this certificate in the TrustedCA
keystore view and try again. Please take this third steps as the
principal one.
Hope it solves your querie.
Regards,
Caio Cagnani

Similar Messages

  • Using wildcards (*) in sender file adapter - FTP type

    Hi guys!
    Dooes it work using wildcards in sender file adapter (FTP type(!) (filesystem obviously work))? I tried it and it failed. it works only for exact name..
    I read some articles about FTP and the result is, that ftp work always only with 1 file, so I'm wondering, if this is possible.
    Thanks for info!
    Olian

    Thanks for all replies..
    I know of course, that * can be used, I use it in many scenarios too. But on a FileSystem. It is not working if the sender type is FTP.
    *, ., *.dat, ...  nothing like that works..  Just exact file name.
    I am able to pick up file, if I specify it's exact name, so there should be no problem with permissions..
    Please, I'd appreciate one reply with comfirmation: yes, we are using asterisk (*) , we access source files via FTP and they are processed.
    Is there anybody with this experience, that it works?
    Thank you!
    Olian

  • Sender File Adapter - FTP

    XI is picking up While File is being written in the Specified Directory. XI uses File adapter ( FTP transport Protocal ) . If file being written is very large ( It may take couple of minutes ) XI picks it up in parts for every 1 minute ( It was configured like that ) and try to send over Which is not correct. Is there any workaround to this issue. In PI 7.0, for NFS file system,  SAP included modification check but it doesn't work for ftp file adpater. Basically XI should wait to pickup file until the file written completely in the Source System.
    Anyone have any Idea how to overcome this issue ?

    Hi,
    You could use the Advanced mode checkbox in the file adapter, to specify the time the adapter has to wait, before it checks if the file has been modified.
    In case, the file has been modified, after the adapter read the file, the data in the adapter cache is discarded and the updated/modified file is taken from the source path specified.
    This would work, only if you have not specified "recordsets per message" during content conversion.
    Regards,
    Smitha.

  • Receiver File Adapter: FTPS Error

    On sending a text file to a trading partner the log in the communication channel shows the following:
    Connecting to FTP server - success
    Write to FTP server - success
    Transfer: "TXT" mode - success
    Exception caught by adapter framework:connection timed out - Error
    The FTP connection Parameters have:
    Data connection = Passive
    Connection security = FTPS (FTP using SSL/TLS)
    Command order AUTH TLS, USER, PASS, PBSZ, PROT
    Use of X509 cert for Client Authentication is checked
    Keystore = service_ssl
    x.509 Cert and private key = *******.crt
    When I look in the NWA logs for default trace I see several messages with the text "Rolling back transaction for message..." plus a FILE_ERR_211
    What is a FILE_ERR_211?
    Thanks
    Mark

    hi mark,
    To configure a timeout for the FTP connection, please enable the "Advanced Mode" for the respective FTP communication channel in the Integration Directory and add an entry "ftp.timeout"=timeoutSecs
    (without any quotation marks) to the "Additional Parameters" section, where timeoutSecs is the desired FTP timeout in seconds.
    regards
    kummari

  • Sender File Adapter (FTP Protocol)

    Hi Every Body,
    I have a problem in using Sender File Adapter of (FTP Protocol Type)
    I have given all required settings to get connected to the FTP Server.
    When i give ( Source Directory and Exact File Name ex : MDMERP.xml)
    File gets picked up.
    But When i give (Source Directory and Exact File Name ex : *.xml)
    it gives below exception
    Error occurred while connecting to the FTP server "mdmerp6:21": java.net.ConnectException: Connection refused: connect
    Strange any guess !! :(((
    Regards
    Srinivas

    Hi,
    If that is connection error then it should have not allowed to pick up when i have given the specifif file name ,
    .xml is too not working
    my problem all starts if i use other than file name declarartion it throws error
    of below kind
    Error occurred while connecting to the FTP server "mdxxxp6:21": java.net.ConnectException: Connection refused: connect
    Can i use " Advanced Selection of Source File" and make it run\
    With regards
    Srini

  • File Adapter - FTP - Unable to Create new pooled resource

    Hi Friends,
    I am getting the following error while using file adapter with FTP protocol...
    Attempt to process file failed with Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: FTPEx: PASS command failed
    Error MP: Exception caught with cause com.sap.aii.af.ra.ms.api.RecoverableException: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: FTPEx: PASS command failed
    Error Exception caught by adapter framework: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: FTPEx: PASS command failed
    Error Delivery of the message to the application using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: FTPEx: PASS command failed.
    Can someone help me to solve this probelm..
    Regards,
    Shyam.

    Hi,
    Try to check the directory you have specified in the CC and also check whether you are able to connect to the FTP server with those login credential and access the directory specified.
    Also let me know whether it is working fine for other scenario's or not.
    Regards,
    Nithiyanandam

  • File Adapter - FTP Error

    Hi,
    I have a Sender File Adapter using FTP which polls a server every 60 seconds looking for a file. Intermittently the adapter will connect and pick up the waiting file. However, more often than not it gives an error:
    An error occurred while connecting to the FTP server 'xx.xx.xx.xxx:21'. The FTP server returned the following error message: 'com.sap.aii.adapter.file.ftp.FTPEx: 426 Unexpected reply codeConnection closed; transfer aborted.'. For details, contact your FTP server vendor.
    The connect mode is Permanently and the transfer mode is Binary.
    Any ideas ?
    PaulC.

    Monica,
    Can you explain the difference between ACTIVE and PASSIVE and why changing to ACTIVE may get rid of this issue ? Have looked at the help.sap.com and it doesn't give too much detail on these settings.
    Thanks
    PaulC.

  • SENDER FILE ADAPTER (FTP) ERROR

    Hi,
    Iam getting the following error in sender file adapter:
    Could not process due to error: com.sap.aii.adapter.file.ftp.FTPEx: 550 *** ERROR *** NO BATCHES FOR TRANSMISSION
    Could anyone help me in this.
    Thanks &Regards,
    Kiran

    Hi Kiran,
    This problem is not related to PI but rather related to FTP server settings.
    Try changing the name of the file in your adapter settings to a string without any dots and ".
    Try this and let me know if its successful.
    Regards,
    Divya

  • File Adapter - FTP from PI to Mainframe - change dataset name

    Hi,
    I am attempting to ftp a file to our mainframe server using a file adapter with FTP transport protocol.  I am able to successfully ftp the file there; however, it does not go into the requested dataset.  Let me explain:
    FTP account name:  ABCD.  When connecting via ftp the default starting point is the account name (ABCD).  When PI puts the file to the mainframe the dataset name is copied as ABCD.LEVEL1.FILENAME.
    However, we need to change levels to the top (above ABCD) and make the dataset name as LEVEL1.FILENAME.
    I've searched for hours on SDN and haven't found a good explanation on how to do this and if it is even possible.  Can someone provide some assistance?
    Thanks,
    Clinton

    As a follow-up, our team was able to resolve the issue.  In MVS dataset naming conventions (at least from a Unix client), you must enclose the absolute file pathname in single quotes, otherwise it will be interpreted as a relative file pathname; thatu2019s why files were written to 'ABCD.LEVEL1.FILENAME' under the home directory of the mainframe user id (ABCD).  Also the directory/file name components cannot be more than 8 characters.
    In our example, the target directory is 'LEVEL1' enclosed in single quotes and the filename is FILENAME without quotes.

  • File Adapter: FTP issue

    Hello,
    There is a problem with the file adapter of the XI30 SP14:
    It is set to get a file from a server X using a FTP protocol.
    INT_001_V01_COM_CTDCLNT600_FILE_SENDER
    Sender Adapter v2300 for Party '', Service 'CTDCLNT600':
    Configured at 2006-01-16 15:13:52 EST
    History:
    - 2006-01-16 15:23:54 EST: Polling interval started. Length: 60.000 s
    - 2006-01-16 15:23:54 EST: Processing finished successfully
    - 2006-01-16 15:23:52 EST: Processing started
    - 2006-01-16 15:22:54 EST: Polling interval started. Length: 60.000 s
    - 2006-01-16 15:22:54 EST: Processing finished successfully
    It seems everything is working fine, but the in the SXMB_MONI transaction, no message appears.
    I have accessed the FTP manually and I have downloaded the file, so the connectivity issue is descarted.
    Any suggestion.
    Jesus Barba Lobaton

    Hello all,
    The current configuration of the Sender file adapter is:
    Transfer protocol: FTP
    Message protocol: File Content Conversion
    Adapter Engine: Integration Server
    Source Directory: /out
    File: D_P.DAT
    In FTP: the file D_P.DAT is placed under /out directory
    Server: Server Internal IP
    Port: 21
    Connection security: None
    User: userX
    Pass: FTPuserX
    Quality of Service: Exactly once
    Poll Intervals: 60
    Processing mode: Delete
    File Type: Binary
    How can I verify a log of the processing process? as the SXMB_MONI transaction does not show anything.
    The most frustrating of all, is no error message appears. I have verified the XI, APPS and default trace logs with log viewer but there is nothing.
    I have also checked this thread but none of the solution provide solved the issue
    Pbm in File adapter..Post Sp14
    OS: Windows 2003
    Any idea?
    Jesus

  • Mainframe Integration using File Adapter (FTP Mode):: ftp commands

    Hi,
    We are trying to integrate with Mainframe system using File Adapter. (FTP mode). We are able to write the file to Mainframe system but not able to format it properly. We had to provide FTP parameter,  <b>ftp.quote site recfm=fb lrecl=150</b>
    As per SAP Note 801926 :: XI 3.0 File Adapter: Additional Parameters, the only parameter that can be used is <b>ftp.timeout</b>. Has anyone tried out using other FTP parameters? (like ftp.quote)
    Any help is grealy appreciated.
    Regards,
    Siva Maranani

    I am looking at running some OS commands especially the QUOTE SITE FILENAME, and found this OSS note:
    https://service.sap.com/sap/support/notes/841704
    In this note it says...
    "Note that for the File Adapter transport protocol "FTP", the operating system command is NOT executed on the FTP server, but on the server hosting the Adapter Engine."

  • File Adapter FTP Error : 501

    Hi All,
    I am getting following error in the communication channel for File Adapter.
    'com.sap.aii.adapter.file.ftp.FTPEx: 501 IP Address for data destination doesn't match client's.'
    Communication channel details are as follows -
    FTP protocol is used with Port 21.
    Data connection - Active
    File type : Binary.
    The same interface is working fine in Development, Quality and Pre-Prod environments.
    This issue is coming only for Production FTP server.
    From the error text, it appears as a network issue.
    Please to let me know if anyone has came across such issue earlier, and what the the possible reasons - solutions to resolve this.
    Thanks a lot.
    Regards,
    Minal

    >
    Minal Vaidya wrote:
    > Hi All,
    >
    > I am getting following error in the communication channel for File Adapter.
    >
    > 'com.sap.aii.adapter.file.ftp.FTPEx: 501 IP Address for data destination doesn't match client's.'
    >
    > Communication channel details are as follows -
    > FTP protocol is used with Port 21.
    > Data connection - Active
    > File type : Binary.
    >
    > The same interface is working fine in Development, Quality and Pre-Prod environments.
    > This issue is coming only for Production FTP server.
    >
    > From the error text, it appears as a network issue.
    > Please to let me know if anyone has came across such issue earlier, and what the the possible reasons - solutions to resolve this.
    >
    > Thanks a lot.
    >
    > Regards,
    > Minal
    this seems to be something to do with your firewall... you can have your network team involved so that the can work a solution.
    a good read: http://lists.opensuse.org/opensuse-security/1999-11/msg00099.html

  • Problem with file adapter (FTP) created under business service

    Hi
    I am using file adapter in my receiver communication channel. I dont know the physical existance of the system so i have created one business service. Under this business system i have created a file adapter with FTP protocol. I have given all the parameters. But when i am trying to execute my scenarion i am getting the following error in SXMB_MONI.
    com.sap.aii.utilxi.misc.api.BaseRuntimeException thrown during application mapping com/sap/xi/tf/_SQLMediaCodeToCRMCapaign_: RuntimeException in Message-Mapping transformatio~
    In RWB i am getting the following error.
    Mapping Error
    Execption_During_Execution
    In Communication Channel monitoring I am not getting any information regarding receiver file adapter. Its not showing any message either error or sucessful. How to find whether my receiver communication channel FTP parameters configured correctly or not.What is the error. Please help me.
    Regards
    Sowmya

    Somya,
    Error clearly indicates that issue is with mapping....so there is no point of checking receiver adapter..
    BTW for checking whether the FTP site is working properly or not , you can use any ftp client softwares or command prompt of windows also.
    ---->In Communication Channel monitoring I am not getting any information regarding receiver file adapter. Its not showing any message either error or successful.
    Message has not reached up to that level so no point of looking at receiver communication channel.
    Regards,

  • File Adapter FTPS: Error - iaik.security.ssl.SSLException

    I'm trying to use FTPS to communicate from XI ( SP 15 ) .  FTPS system Admin provided CA Certificate and we installed same in key Storage as trusted CAs.
    However when I try to send file It was throwing message " Error: Message processing failed: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: illegal parameter "  In the Adapter Monitoring .
    However same Certificates installed on recent versions of XI ( PI 7.0) works just fine.
    Any ideas will be appreciated.

    Hi S T,
    Check these..
    Details for 'Is Web service security available?'
    HTTPS Error
    All the best!
    cheers,
    Prashanth
    P.S Please mark helpful answers

  • Sender File Adapter - FTP Connection Error 530

    Need help!!!
    I am getting the following error in XI when I try to connect to an ftp server.
    "An error occured while connecting to server xxx.xx.x.xx:xx. The FTP server returned the following error message:'com.sap.aii.adapter.file.FTPEx: 530 Can't open passive connection---(4013)'. For details, contact FTP server vendor"
    When I try the FTP connection on the OS level I am able to log in, but through XI I am unable to.
    Has anyone seen this error before?

    I have seen Error Code 530 earlier, it is typically related to login related issues.
    Check if the user mentioned in the Comm Channel has the correct password and read as well as write rights on the Server.
    The most likely problem is with the User Credentials or Authorizations

Maybe you are looking for