HANA Studio connect using SSL

Hi ,
I configured SSL in Hana server using Snote 1718944 and configured the JDBC settings using Security Guide "4.3.1.1 Server-Side SSL Configuration for ODBC/JDBC Client Access" and "4.3.1.3 Configuring SSL for SAP HANA Studio Connections" . while conmecting to database using SSL , getting below JDBC trace :
Thread 15490f81 Thread-209 Timestamp: 2014-04-04 15:01:30.637
new Connection 'jdbc:sap://16.184.47.138:31015'
locale=en_US
user=SYSTEM
password=***
timeout=0
reconnect=true
validateCertificate=true
encrypt=true
new RTEException: -813 Cannot connect to host 16.184.47.138:31015 [Connection reset], -813.
whereAmIjava.lang.Throwable
    at com.sap.db.util.Tracer.whereAmI(Tracer.java:352)
    at com.sap.db.rte.comm.RTEException.<init>(RTEException.java:66)
    at com.sap.db.rte.comm.SecureCommunication.openSocketIntern(SecureCommunication.java:793)
    at com.sap.db.rte.comm.SecureCommunication.openSocket(SecureCommunication.java:512)
    at com.sap.db.rte.comm.SecureCommunication.<init>(SecureCommunication.java:99)
    at com.sap.db.rte.comm.SecureCommunication.<init>(SecureCommunication.java:55)
    at com.sap.db.rte.comm.SecureCommunication$1.open(SecureCommunication.java:60)
    at com.sap.db.jdbc.topology.Topology.getSession(Topology.java:145)
    at com.sap.db.jdbc.Driver.openByURL(Driver.java:1019)
    at com.sap.db.jdbc.Driver.connect(Driver.java:230)
    at com.sap.ndb.studio.jdbc.JDBCConnection$1.run(JDBCConnection.java:153)
using null
=> FAILED
please guide
Regards,
Siva

Hi,
i have one doubt here..
please provide the procedure to do the below activity ..
Using the keytool command line tool, import the trust store file that contains the server root certificate into either the Java keystore or your personal user keystore
i used below commnd, is it right???
keytool -import -trustcacerts -alias root -file getCert.cer -keystore keystore.jks
Regards,
Siva

Similar Messages

  • HANA Studio connection with HANA server in HANA One (Rev 56 and up)

    Dear HANA One Customers,
    You must be aware of our latest HANA One release with HANA SP6 (blog: The specified item was not found. Once you launch a new instance using HANA One Rev 52.1, you can upgrade your instance to HANA Rev 56 or HANA Rev 62. You can do it in steps (Rev 52 -> Rev 56 -> Rev 62) or do directly (Rev 52 -> Rev 62). By the way, Rev 62 is the first HANA 1.0 SP6 release in HANA One. As we recommended, if you upgrade HANA Version to 56 or 62, please upgrade your HANA Studio and HANA Client to the corresponding version.
    If you upgrade to either Rev 56 or Rev 62, you don't need to add any entry to C:\Windows\System32\drivers\etc\hosts to connect HANA Studio to use all the functionality of HANA Studio with HANA in cloud. While HANA One's add-on manager, upgrades. it makes a change in one configuration file (global.ini) for public_hostname_resolution.
    However, if you change IP of your HANA One instance, you need to update this parameter which is described in the Quick Start Guide. The steps are summarized as:
    In the Administration editor of HANA Studio,
    Choose the Configuration tab. A list of all configuration files appears.
    Expand the global.ini configuration file
    Select the section public_hostname_resolution
    Choose Next and enter the values map_hanaserver in the Key field and your IP or public DNS in the Value field.
    For example, set the values as Key: map_hanaserver, Value: xx.xx.xx.xx if you use an IP address including an Elastic IP. If you use DNS as the value it could be ec2-xx-xx-xx-xx.compute-1.amazonaws.com
    With this new feature, the same HANA Studio can connect to many HANA One instances at the same time which was not possible earlier prior to Rev 56.
    Thanks,
    Swapan

    Yes Aleksandr
    I think you are right.
    After doing many installation of HANA Server in differrent AWS instances it didn't work for me.
    But when I installed the HANA Studio on another machine with more RAM it worked.
    I think we have to install HANA Studio on another AWS instance with 16 GB RAM to make it run smoothly.
    Thanks & Regards
    Manu

  • HT201320 when trying to set up my email account, i enter add account tap in my details for my virgin media email account, after going through the veryfying, it comes back with cannot connect using ssl.

    when trying to set up my personal email account, following the on screen instructions, it comes back with CANNOT CONNECT USING SSL, do you want to try setting up the account without ssl? Yes or No

    Since Thunderbird does not run on iPads, what does this have to do with Thunderbird?

  • When I try to set up my Optimum account email I get a message saying Cannot Connect Using SSL.

    When I try to set up my Optimum email account I get an error message saying Cannot Connect Using SSL. 

    What mail provider is it?
    Have you Googled for: setup XXX email on iPhone
    where xxx is the provider
    You can try going to Mail>the accounts>Advanced and turn Use SSL on or off, the opposite of what it is now.

  • Im trying to set up email on my iphone4 and it is saying "cannot connect using SSL" what does this mean?? what am i doing wrong because i cannot set up email??

    how do i set up email on my iphone??? it says "cannot connect using ssl" whats this mean, i cant recieve or send emails coz of this

    Try just choosing yes when it says that.  And yes if you get it a second time.  Lots of mail providers don't use SSL.

  • New gmail account on iPhone cannot connect using SSL

    Hi,
    I was having problems accessing the gmail server on my iphone so i deleted the account settings on the iphone and am creating a new one. However, the iphone tells me that it cannot connect using SSL. Has anyone had a similar problem? I don't want to setup the account without this basic security.

    Hey milos321,
    I'm not sure what caused the issue. I believe account may have been automatically locked because abnormal activity.
    You can find more detailed information here:
    http://mail.google.com/support/bin/answer.py?answer=61805
    http://mail.google.com/support/
    Jason

  • HT201320 I m trying to add my gmail acoount to mail app but when i click on next button it is showing following message, cannot connect using ssl, what to do???

    I m trying to add my gmail acoount to mail app but when i click on next button it is showing following message, cannot connect using ssl, what to do???

    Some of the following may help:
    How to enable imap: https://support.google.com/mail/troubleshooter/1668960?rd=1
    For your username, did you enter the full name including "@gmail.com"
    Do you have gMail 2-step verification turned on? If so, you need to use an application-specifc password instead of your normal password if using a mail app: https://support.google.com/mail/answer/1173270?hl=en

  • HT201320 having problems setting up email for a tiscali email address - after trying to verify ipda comes up saying cannot connect using SSL

    trying to set up my tiscali email address on an ipad mini, after trying to verify, message comes up stating "cannot connect using SSL"

    Not sure what the shortcut is. I'm just going, Settings > Mail > Add Account > Gmail
    That is the GMail shortcut. That should work. Just for testing, use the "Other" shortcut.
    Settings / Mail / Add Account / Other
    Name: <put your name>
    Email [email protected]
    Incoming server: pop.gmail.com
    Login: [email protected]
    Password: yourpassword
    Outgoing server: smtp.gmail.com
    Login: [email protected]
    Password: yourpassword
    Hit SAVE.
    It should set itself up correctly without you having to specify anything else. Try that.

  • Connecting Using SSL Authentication Without Username and Password

    Hi,
    We're on RedHat Linux 4.0 using 10.2.0.3 (server/client). We're trying to figure out a way to connect to the database using instantclient and JDBC-OCI and SSL authentication without using a username or password. According to the documentation this should be possible but no sample code is given.
    LD_LIBRARY_PATH is set /opt/app/oracle/product/10.2.0/db_1/lib:/usr/lib:/home/oracle/instantclient where the instantclient was installed from the 10.2.0.1 client software
    and we are using JDK version 1.6.0_03.
    We're also referencing the following paper:
    http://www.oracle.com/technology/tech/java/sqlj_jdbc/pdf/wp-oracle-jdbc_thin_ssl_2007.pdf
    We've got our client and server wallets configured and the sample code we tried looks like this:
    import java.sql.*;
    import java.sql.*;
    import java.io.*;
    import java.util.*;
    import oracle.net.ns.*;
    import oracle.net.ano.*;
    import oracle.jdbc.*;
    import oracle.jdbc.pool.*;
    import java.security.*;
    import oracle.jdbc.pool.OracleDataSource;
    public static void main(String[] argv) throws Exception {
    DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
    Security.addProvider(new oracle.security.pki.OraclePKIProvider());
    System.setProperty("oracle.net.tns_admin", "/opt/app/oracle/product/10.2.0/db_1/network/admin");
    String url = "jdbc:oracle:thin:@orcl";
    java.util.Properties props = new java.util.Properties();
    props.setProperty("oracle.net.authentication_services","(TCPS)");
    props.setProperty("javax.net.ssl.trustStore",
    "/opt/app/oracle/product/10.2.0/db_1/admin/wallet/server/cwallet.sso");
    props.setProperty("javax.net.ssl.trustStoreType","SSO");
    props.setProperty("javax.net.ssl.keyStore", "/opt/app/oracle/product/10.2.0/db_1/admin/wallet/client/cwallet.sso");
    props.setProperty("javax.net.ssl.keyStoreType","SSO");
    props.put ("oracle.net.ssl_version","3.0");
    props.put ("oracle.net.wallet_location", "(SOURCE=(METHOD=file)(METHOD_DATA=(DIRECTORY=/opt/app/oracle/product/10.2.0/db_1/admin/wallet/client)))");
    System.out.println("At Here...");
    OracleDataSource ods = new OracleDataSource();
    //ods.setUser("scott");
    //ods.setPassword("tiger");
    ods.setURL(url);
    ods.setConnectionProperties(props);
    System.out.println("At Here1...");
    Connection conn = ods.getConnection();
    System.out.println("At Here2...");
    Statement stmt = conn.createStatement();
    ResultSet rset = stmt.executeQuery("select 'Hello Thin driver SSL "
    + "tester ' from dual");
    while (rset.next())
    System.out.println(rset.getString(1));
    rset.close();
    stmt.close();
    conn.close();
    When this code is compiled and run, the following error is thrown:
    Exception in thread "main" java.sql.SQLException: invalid arguments in call
    at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:112)
    If a username and password is supplied, the code works. So does anyone have a working of using SSL to authenticate without supplying username/password?
    Thanks
    mohammed

    Hi,
    I just solved this. I noticed from another thread that I was not using the OCI driver (see below):
    String url = "jdbc:oracle:thin:@pki14";
    Once I changed it to:
    String url = "jdbc:oracle:oci:@pki14";
    The code worked perfectly. One more setting that you'll have to do is to create the user you want to connect as externally:
    create user scott identified externally as
    'CN=acme, OU=development, O=acme, C=US';
    grant connect,create session to scott;
    Note that the DN should be the same as the SSL certificate that you created in your wallet.
    hth
    mohammed

  • No SQL (hdbsql / HANA Studio) Connection to SAP HANA Rev. 69 (all services GREEN, running)

    Hi all,
    after starting HANA instance (locally installed on Linux Laptop) via sapcontrol [1], checking with sapcontrol's GetProcessList as well as HANA Studio Admin Console Diagnosis Mode Shows all Services GREEN, running.
    However, when I try to open "Default Administration" in HANA Studio, it "Refreshing Overview" and is busy till infinity.
    Trying to connect via \c command of HDBSQL eventually works, but any commands like \ds (list schemas) will run till infinity without returning anything.
    SAP Business One for HANA SLD shows the Server but not the Company DBs / schemas.
    I attached sapstart.log and statisticsserver_alert_sid.trc.
    Any advice is highly appreciated.
    Thanks & Kind Regards
    Stephan
    [1] I start HANA executing: /usr/sap/<SID>/SYS/exe/hdb/sapcontrol -prot NI_HTTP -nr 00 -function StartWait 270 2 OR /usr/sap/<SID>/SYS/exe/hdb/sapcontrol -nr 00 -function Start with user sidadm
    [2] The issue occurs since the upgrade from Rev. 53 to HANA Rev. 69 (in the context of upgrading from Business One for HANA PL02 to PL09)

    Yes Aleksandr
    I think you are right.
    After doing many installation of HANA Server in differrent AWS instances it didn't work for me.
    But when I installed the HANA Studio on another machine with more RAM it worked.
    I think we have to install HANA Studio on another AWS instance with 16 GB RAM to make it run smoothly.
    Thanks & Regards
    Manu

  • HT201320 When i try to set up my mail account and get to save/verifying - I get a notice saying Cannot Connect Using SSl-

    When i try to set up my mail acct. and get6 to save/verifying - I get a notice saying Cannot connect to SSL.

    What mail provider is it?
    Have you Googled for: setup XXX email on iPhone
    where xxx is the provider
    You can try going to Mail>the accounts>Advanced and turn Use SSL on or off, the opposite of what it is now.

  • AIR on Android can't connect using SSL

    I'm trying to connect to a Java server using SSL, with a signed and trusted certificate, but keep getting InvalidCertificate error.
    Everything is fine with the certificate, but the error happens when connecting through android AIR app.
    Connection works fine when connecting without SSL, but that is not an option.
    What may be wrong?

    More info:
    Renaming the cert8.db didn't change anything.
    I get into these ILO interfaces fairly often and I can say that Firefox had a problem over a year ago (or so) where it would let you in once and then say (IIRC) Invalid Cookie on subsequent attempts. Maybe deleting the cert8.db would fix that. Anyway, an update fixed that issue.
    I just tested with Firefox 17 and it worked fine. Here are screen shots and the .cer file I exported. This is from a different (virgin) server at .93
    https://www.dropbox.com/l/gGYGz2myJnUu9uNoPwsYxd
    (Hope this works -- I'm new to DropBox)
    IE says:
    The security certificate presented by this website was not issued by a trusted certificate authority.
    The security certificate presented by this website was issued for a different website's address.
    I didn't generate the certificate; the come pre-generated by HP. Anyway, I tried re-generating the certificate and I now get this error:
    Secure Connection Failed
    An error occurred during a connection to 10.1.20.91. You have received an invalid certificate. Please contact the server administrator or email correspondent and give them the following information: Your certificate contains the same serial number as another certificate issued by the certificate authority. Please get a new certificate containing a unique serial number. (Error code: sec_error_reused_issuer_and_serial)
    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site.
    I tried to attach the exported certificate, but I seem to only be allowed to upload graphical images.
    IE Key Usage says: Certificate Signing, Off-line CRL Signing, CRL Signing (06)

  • Configure MQ Connection using SSL

    Hi,
    I wonder if its possible to tell the "foreign" JMS MQ client to use a specific
    private key/certificate when communicating with its MQ Server which requires a
    SSL connection. I have setup the parameters for the MQ part so far and if run
    in an example outside WLS it uses the JCP from Sun and perfectly communicates
    with the Server. We also have setup SSL with a differnt key and it works fine
    (T3s, etc.). But how to tell the WLS what additional keystore/alias it should
    use when the connection to the MQ server should be handled ?
    Thanks for any ideas.
    Regards
    Tomy

    WLS configuration allows to set the server's SSL identity and trust that will be
    used by the server to identify itself to its SSL clients. The SSL clients running
    on server using WLS SSL APIs inherit server's SSL trust configuration. The identity
    of the client has to be configured via particular client API. There is no way
    to configure WLS to do that for you.
    Pavel.
    "Tomy" <[email protected]> wrote:
    >
    Hi,
    I wonder if its possible to tell the "foreign" JMS MQ client to use a
    specific
    private key/certificate when communicating with its MQ Server which requires
    a
    SSL connection. I have setup the parameters for the MQ part so far and
    if run
    in an example outside WLS it uses the JCP from Sun and perfectly communicates
    with the Server. We also have setup SSL with a differnt key and it works
    fine
    (T3s, etc.). But how to tell the WLS what additional keystore/alias it
    should
    use when the connection to the MQ server should be handled ?
    Thanks for any ideas.
    Regards
    Tomy

  • SM59 and a HTTP Client Connection Using SSL

    All,
    I'm running an ECC 6.0 (EHP 5) system.  Our ECC System is a dual stack system.  We've recently enabled SSL on the ECC's java stack.  The SSL Server Certificate has been signed by my organization's internal CA.  All of our desktops recognize this CA.  I'm pretty sure SM/59/our ABAP system does not.
    After enabling HTTPS on the Java Stack (TCP port 5XX01) we disabled the HTTP service (5XX00) per our security overlords mandate.
    The only application we have running on the Java Stack is Adobe Document Services.  The setup guide for ADS is located here.
    As you can see, ADS involves a HTTP Connection in SM59.  How do I configure this HTTP connection in SM59 over SSL (HTTPS).
    Key considerations:
    1. I've not imported our Enterprises' Root CA into the Trusted CAs for AS ABAP for the main reason that I do not know how to.  How do I do this?

    Presently I have gone to the "Logon & Security" tab of SM59.  Under "Security Options" I have set SSL to "Active".  SSL Certificate is set to ANONYM SSL (Anonymous).  On the "Technical Settings" tab I have updated the port to point to the HTTPS port.
    When I test the RFC, as presently configured, the error is "ICM_HTTP_CONNECTION_FAILED", with no additional details or long text.

  • SQL Server Connection using SSL

    I am currently using an encrypted connection to a SQL Server database. I am able to do this by  appending "encrypt=true" to my connection string and using a .pem file that I am able to apply using the Microsoft management console. 
    http://www.sqlservermart.com/HowTo/Windows_Import_Certificate.aspx
    Is there another way to dynamically import a security certificate or set it using the LabView Db connectivity toolkit?
    Solved!
    Go to Solution.

    Almost everything you can do in the MMC plugins can also be done from the command line in Windows.  You just need to find the proper set of commands, and use the System Exec VI to implement your solution.
    http://technet.microsoft.com/en-us/library/cc732061(v=ws.10).aspx
    Machine Vision, Robotics, Embedded Systems, Surveillance
    www.movimed.com - Custom Imaging Solutions

Maybe you are looking for