HTTP-ADAPTER with HTTPS = ICM_HTTP_SSL_ERROR

Hi,
we are trying to sending data via HTTPS with the HTTP-Adapter. Therefor we create a RFC_Destination with SM59. For HTTP it works fine but after changing to HTTPS we receive a ICM_HTTP_SSL_ERROR.
The server on the other side expect authentification via User/Pwd on port. Also we added an entry in STRUST for CN=anonymous in STRUST.
Any idea whats wrong ?

Hi Sammer,
- authentification is username/pwd.
- SSL is active because of https
- Service is set to the https-port of the server.
I receive the following error in the log.
[Thr 10] >> ---------- Begin of Secude-SSL Errorstack ---------- >>
[Thr 10] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed
ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "OU=Class 3 Public Primary Certification Auth
ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete
[Thr 10] << ---------- End of Secude-SSL Errorstack ----------
[Thr 10] SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"
[Thr 10] SSL socket: local=10.172.11.11:41579 peer=195.14.237.44:3577
[Thr 10] <<- ERROR: SapSSLSessionStart(sssl_hdl=0x1054e08b0)==SSSLERR_SSL_CONNECT
[Thr 10] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT {00021653} [icxxconn_mt.c 1813]
when I delete in STRUST all the certificates under Client_certificate (standard/anonymus) I receive the same error msg. it also the same error when I am trying to connect to another server with https.
regards bernd

Similar Messages

WSRM Adapter replaced with soap in PO7.4. Getting error "Response message contains an errorXIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 500 Internal Server Error"

Hello All,
We have scenario proxy->pi->webservice. In older versions of PI system they used wsrm adapter at receiver side and it's working fine.
Receiver interface is asynchronous. So no response structute is present and receiver service is business component(since receiver is a third party).
During migration, we have replaced the receiver adapter with SOAP adapter and used message protocol as SOAP 1.1 but the message is failing and in communication channel it is showing error "Response message contains an errorXIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 500 Internal Server Error". In this case the receiver interface is stateless xi 3.0 compatible(re using the old), after changing it to just stateless also issue persists.
In target url field if i prefix the url with "http" then above mentioned error is occurring otherwise if i use the hostname:port/path.. then it is giving error
"soap: Call failed: com.sap.aii.af.sdk.xi.srt.BubbleException: Unsupported protocol". So maintaing the url as http://hostname:port/pat.....
As in old channel wsrm channel there is no userid and password, i haven't given any userid/pwd in receiver channel.
used the bean sap.com/com.sap.aii.af.soapadapter/XISOAPAdapterBean with parameters
Module Key = soap
Parameter Name = noSOAPMakeSysErrFromResponseFault
Parameter Value = false
and
xmbws.No SOAPIgnoreStatus = true
but not successful.
Please help me. I got stcuk here.

Hello Jannus,
The connectivity is working fine. Network team has confirmed it. I doubt that any strucutre(header) difference might be present in message when sending with wsrm adapter compared to sending with soap adapter.
Please let me know the exact difference between soap and wsrm functionality in receiving end.
By considering the structure issue, i have checked the "do not use soap envelope" check box, then i got error "Response message contains an errorXIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 415 Unsupported Media Type"
Then i used message transform bean, but not successful.
Regards,
Ch.Venkat.

XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 404 Not Found

Hi,
The scenario is ECC-XI-SOAP(Asynchronous). We are getting the below mentioned error in SOAP reciver channel:
Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: SOAP: response message contains an error XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 404 Not Found
Channel Configuration:
Target URL:
http://<hostname>:<port>/bpm/com/xyzprocess/SomeIntermediateEvent?wsdl=binding&mode=ws_policy
Tried with
http://<hostname>:<port>/bpm/com/xyzprocess/SomeIntermediateEvent as well
Conversion parameters:
Checked Do Not Use Soap Envelope
Appreciate any help in this regards.
Regards,
Vishal

Can you share with us the HTTP Headers for the Request?
POST http://server/sap/xi/engine?type=entry&version=3.0&Sender.Service=BusService&Interface=http://company.com/abc/CommonAck%5EMI_CommonAck_ia HTTP/1.1
Accept-Encoding: gzip,deflate
Content-Type: text/xml;charset=UTF-8
SOAPAction: "http://sap.com/xi/WebService/soap1.1"
User-Agent: Jakarta Commons-HttpClient/3.1
Host: server
Content-Length: 560
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xir="http://www.dummy.org/response/">
<soapenv:Header/>
<soapenv:Body>
<xir:responseInput>
<Id>007</Id>
<Flag>10</Flag>
</xir:responseInput>
</soapenv:Body>
</soapenv:Envelope>
You can use the MessageTransformBean to correct the content type.
Thanks for the suggestion Mark.I am using MessageTransformBean but still the same issue.
Parameter Name:Transform.ContentType
Parameter Value:text/xml;charset=utf-8
Edited by: Vishal.P.Kulkarni on Oct 17, 2011 6:27 AM
Edited by: Vishal.P.Kulkarni on Oct 17, 2011 6:29 AM

XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 400 Bad Request

Hi,
We are doing File to WCF Scenario( SOAP ). I am trying to post the Data to WCf usingf SOAP Reciver Adapter.
Getting the Following error.
Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: SOAP: response message contains an error XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 400 Bad Request
Thanks in advance

>>> Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: SOAP: response message contains an error XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 400 Bad Request
Answer: Use the third party wsdl in SOAP UI or any soap client tool and send the request and see the response. The problem here is the message structure mismatch between your request to the webservice and webservice expecting...
Possible 2 reasons:
1) You are not creating the target message based on the wsdl structure or not configured soap receiver properly.
or
2 ) Your wsdl is not latest or updated one or some changes have happened in the third party webservice hosting side.

XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 500 Internal Server Error

I'm getting this message in RWB when trying to send an order:
Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: SOAP: response message contains an error XIAdapter/HTTP/ADAPTER.HTTP_EXCEPTION - HTTP 500 Internal Server Error
Weird thing is, other orders have been successfully to the same partner.
Is this something on my side or the receivers side?
What does HTTP 500 Internal Server Error mean and how to fix?
Thanks,
Jeff

More info on this problem:
Discovered that the HTTP 500 error only occurs when a "change" file is sent:
I send an order create file to a partner using a SOAP adapter. They receive it successfully.
I make a change to the sales order and send that file. It uses the same Config Scenario, receiver determination, receiver agreement and comm. Channel.
But this file shows an HTTP 500 error in the RWB.
I send it right after the first order create file, so no overloading is happening, etc.
Conenctivity to the url is fine because the create file went through.
I don't know what else it could be. Any other info/log in RWB to look at to help decipher the error?

How to config receiver http adapter for HTTP POST without XML tags ??

Hi All,
Can you please provide some infornation on How to config receiver http adapter for HTTP POST (Request) without XML tags ?? Our receiving product doesn't support XML formats.
Is there any option to bypass server authentication on the XI?
If anybody has the same experience or know how to please provide inputs.
Thanx
Navin

Hi,
you can use xsl mapping for this in which u xtract
the contents only but not the xml tag.
Ranjit

Using HTTP adapter with no namespaces

Hi,
Is there anyway to use HTTP adapter when the provider does not accept the namespaces. The HTTP binding wizard requires a targetnamespace to be defined in the request and response xsds that we have to use.
Thanks & Regards
Siva

Bernd we are trying to do the same thing only with the soap adapter. I'm convinced that no one really knows how to do it. We can't even find an SAP CONSULTANT that has done it .. at any cost!
If you hear anything good .. please let me know - my email is [email protected]
I think the nightmare is coming in because when SAP bought the j2ee ( application server ) they never really have integrated it so it's very confusing if the settings need to be done on the ABAP side or the J2EE side via visual administrator. In addition most Basis guys are only experienced in the ABAP side and not the J2EE.

Error in SOAP Receiver Adapter with HTTPS

Dear All,
I am developing a SOAP to SOAP scenario with HTTPS i.e. client without authentication and I am facing an issue with the receiver adapter. Few messages fails in the receiver side while rest are successful.
Error - Delivery of the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
Please let me know what can be the reason for the error.
Thanks and Regards,
Rana Brata De

Hi Rana,
Check the certificates sequence as well the certificates end dates in STRUST in SAP PI system. if, deployed in NWA level check over there.
One more :: sending the data to web server or web page. make sure, PI is pointing to which server.
Regards,
Kesava.

HTTP Adapter with dynamic URL

Hi all
Could you please to help. I need to use receiver with HTTP adapter which in this adapter that I need to pass dynamic URL into this. I had try follow this document
http://help.sap.com/saphelp_nw2004s/helpdata/en/43/64dbb0af9f30b4e10000000a11466f/content.htm
but when I test it I got this error
<SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="">
<SAP:Category>XIAdapter</SAP:Category>
<SAP:Code area="PLAINHTTP_ADAPTER"><b>ATTRIBUTE_MISSING_URL</b></SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText />
<SAP:ApplicationFaultMessage namespace="" />
<SAP:Stack>Dynamic Header - Missing Message Attributes: URL/HTTP Destination</SAP:Stack>
<SAP:Retry>N</SAP:Retry>
</SAP:Error>
I think my XML source message format that is incorrect. This is my XML source message
<?xml version="1.0" encoding="UTF-8"?>
<ns0:MT_OB xmlns:ns0="http://xxxx.com:db6">
   <type>
      <TargetURL>http://xx.xx.xx.xx</TargetURL>
   </type>
</ns0:MT_OB>
Could you please to suggest.
Thanks
Park

Hi,
Use the UDF in mapping to create the dynamic URL.
DynamicConfigurationKey keyURL = DynamicConfigurationKey.create("http://sap.com/xi/XI/System/HTTP", <b>XXXXX</b>);
// access dynamic configuration
DynamicConfiguration conf = (DynamicConfiguration) param.get (StreamTransformationConstants.DYNAMIC_CONFIGURATION);
// set value
conf.put(keyURL, url);
See the belowlinks
dynamic URL - adapter specific properties (http receiver adapter)
/people/william.li/blog/2006/04/18/dynamic-configuration-of-some-communication-channel-parameters-using-message-mapping
Regards
Chilla

Sender SOAP Adapter with HTTPs call

Hello,
Our scenarion is .. we will have a sender SOAP adater .. but it needs to be called using HTTPs(SSL).
Now considering we have the certificate generated and installed ..and that integration server is HTTPs enabled....What URL should the sending system call..?
For normal HTTP call the inbound address for inbound Adapter is: http://host:port/XISOAPAdapter/MessageServlet?channel=party:service:channel
For the case of HTTPs just changing the htttp to https and the port number in in the calling system will suffice? Or is there other configurations that needs to be done??
Thanks and Regards,
Himadri

Hi Himadri,
Firstly as suggested by others you can call using https and give the https port in the soap adapter servler URL. Secondly you need to do the following configurations:
1) If its PI 7.0/3.0, deploy the latest version of the SAP Java cryptography toolkit.
2) Configure SAP PI as the server for HTTPS calls. In short
      Using the SSL Provider service:
                            a.      Select whether the J2EE Engine should:
                               ■      Request (but not require) that the user presents a client certificate for authentication.
                               ■      Require that client certificates are to be used for authentication.
                            b.      Import the CAu2019s root certificate into the Trusted Certification Authorities list. (Choose Add.) using the following For all the steps, link is mentioned below for XI 3.0, you can find similar ones for PI 7.0
http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/content.htm
3) If you want to enable client authentication then you would need to add the client certificate in the TrustedCA keystore view of the SAP J2EE engine.
4) In the SOAP Adapter sender channel, configure Inbound Security level as HTTPS or HTTPs with client authentication based on your scenario.
Best Regards,
Pratik

Sender SOAP Adapter with Https

Hi,
can any one give me information on how my Sender SOAP adapter to be configured with HTTPS port.
please give me the what are all different ways to make my Sender SOAP Adapter secure and give me the steps to achieve the functionality.
Thank You,
Madhav

check this section:
http://help.sap.com/saphelp_nw70/helpdata/EN/14/ef2940cbf2195de10000000a1550b0/frameset.htm
Also some help from SAP note:
https://service.sap.com/sap/support/notes/891877
Regards,
Abhishek.
Edited by: abhishek salvi on May 29, 2009 1:59 PM

Accessing Java webservice (XML over http) via WCF or HTTP adapter with content-type and authorization HTTP headers with POST method

Hi Team,
I need to access Java web service which is simple service and accepts and returns XML over HTTP. No credentials are needed to access the service. We need to pass following two HTTP headers (Content-Type and Authorization) along with XML request message:
<GetStatus> message is being constructed in the orchestration and URI is constant to access.
Which adapter shall I use to get the response back? I tried using WCF-WSHttp with Security Mode = Transport, and different options of client credential types but every time, error returned stating:
System.Net.WebException:
The HTTP request is unauthorized with client authentication scheme 'Basic'. The
authentication header received from the server was 'Basic realm='.
Authentication failed for principal Basic. Message payload is of type:
String
In Fiddler, request looks line following
POST <https://URL/GetServiceReopnse HTTP/1.1
Content-Type: application/xml
Authorization: Basic cmVmU3RhdHN2Y19kgeRfsdfs=
Host: <Server name>
<GetStatus XMLNS="http://server.com/.....">
<OrgId>232323</OrgId>
<HubId>3232342323</HubId>
</GetStatus>
MMK-007

First, you should not use the HTTP Adapter because it's been deprecated and replaced by WCF.
Start with the WCF-Custom Adapter and select the customBinding.
You should start with the textMessageEncoder and httpTransport and go from there.

Http webrequest with https uri is not working in windows phone 8.1

I am building a Windows Phone application in which the uat environment was working fine with http url,
But the production url is https, then the applictaion is not able to get the response from http web request method. Please help me on the same.
Cynthia Mareia

Any errors returned in response?
http://developer.nokia.com/community/wiki/Using_Crypto%2B%2B_library_with_Windows_Phone_8

Plain HTTP adapter fort HTTPs

Hi guys,
I use receiver plain HTTP adapter for sending SOAP request. Followinf parameters have tu be entred:
Addressing Type: URL Address
Target Host: <host>
Service Number: <port>
Path Prefix: <path>
Then final address is generated:
http://<host>:<port>/<path>
It's working fine if I use http protocol.
Now I need to send SOAP request to address https://<host>/<path>. I don't know number of port where SSL communication's running.
Is it possible to enforce using of https protocol instead of http? Is it possible to enter empty port number? Or do you have any other idea how to pass around this problem?
Thank you in advance for every advice!
Regards
Zbynek

>>Is it possible to enforce using of https protocol instead of http?
Instead of using URL Addressing option, you need to start using HTTP Destination option. An RFC destination type G should then be created where the similar details of hostname and path should be provided.
>Is it possible to enter empty port number?
Yes it could be empty, but you need to confirm it from the receiver party that would they be able to receive https request or not if no port is provided. This would depend upon the type of implementation they have at their end.
Regards,
Prateek

Seeburger AS2 Adapter with HTTPS transport

The AS2 adapter is generating the following error.
Message processing failed. Cause: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: HTTP-Client component init failed # java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Could not retrieve alias collection., SEEBURGER AS2: HTTP-Client component init failed # java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Could not retrieve alias collection.
According to documentation, the SSL Certificate (keystore) field should point to the keystore, and not a specific key. in my communication channel it does. Thep rivate key points to my key. I have verified both of these entries are correct.
Other than that, this scenario is configured the same as my previously configured scenarios that use HTTP, all working without issue.

Thank you, we had already done that.
What we found however was the entry for the "keystore" in the communication channel, we needed to fully name the key to be used, as opposed to simply the keystore.
Once we did that, we cycled the as2 adapter and were able to send a message successfully.

HTTP-ADAPTER with HTTPS = ICM_HTTP_SSL_ERROR

Similar Messages

Maybe you are looking for