Receiver SOAP HTTPS channel certificate issue in SAP 7.31

Hello SAP team,
We have imported the Partners Https certificate in our NWA and have tried to click the check box of certificate authentication in communication channel .
However we are still getting an error in CC " SSLcertificate exception : Peer certificate rejected by chain Verifier " .
Could you you please tell us that what are we missing on and why are we getting this issue .
Regards,
Ravi

Hi Ravi
Is the cert provided a self-signed cert or signed by a CA entity? If the latter, you need to import all the Certs in the chain of trust (intermediate and root) into Trusted CA key store too.
You can normally get the CA certs directly from the CA's website, but if you are unsure, you can check with your partner.
Rgds
Eng Swee

Similar Messages

Receiver SOAP Comm Channel Settings with TServerLocation

Hello All,
We are working on using Dynamic Configuration of Receiver SOAP. We are using the following scenario
*Can anyone please guide us on Receiver SOAP Comm Channel settings*
1) Value to be used in Target URL
Which parameters need to be checked ?
Currently we are getting the following error
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">
<SAP:Category>XIAdapterFramework</SAP:Category>
<SAP:Code area="MESSAGE">GENERAL</SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText>com.sap.engine.interfaces.messaging.api.exception.MessagingException: com.sap.aii.af.sdk.xi.util.URI$MalformedURIException: no scheme</SAP:AdditionalText>
<SAP:Stack />
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
Truly apprecaite your help
Thanks.
Kiran

Hello
Can anyone guide me on the settings in receiver Comm Channel which uses dynamic configuration in TServerLocation ?
Thanks.
Kiran

Receiver SOAP Communication channel -- Target URL

Hi Experts,
Can anyone provide some inputs for my below question?
How the receiver SOAP Communication channel internally calls the Target URL?
What is the internal process behind this call?
I would really appreciate you all if could provide answers.
Thanks & Regards,
Prabu Muthu

Hi...
To be able to send SOAP messages from the Integration Server/PCK to remote clients or Web service servers, you must first configure the receiver SOAP adapter. The receiver adapter supports system acknowledgments but not application acknowledgments
Find the below link .
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/40611dd6-e66e-2910-f383-e80fb44f9cd4
Regards,
Leela

SOAP Receiver with HTTPS(without certificate)

Hi experts
Receiver system not using any certificate. Without certificate How PI can send message through HTTPS using SOAP.
How to choose HTTPS transport protocol. (Here Target Url have Https://.....)
Here I am using PI7.1 EHP1.
I configured Receiver SOAP CC as
Transport protocol as HTTP
Taget Url https://api-demo.e-xact.com/transaction
It will work? if not how to enable Https in SOAP receiver
but I am getting below error In adapter
Adapter Framework caught exception: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
Thank you
Srini

Hi Srini,
The main reasons for this error "Peer certificate rejected..." be appearing are the following:
1. The correct server certificate could not be present in the TrustedCA keystore view of NWA. Please ensure you have done all the steps described in the URL below:
Security Configuration at Message Level
http://help.sap.com/saphelp_nwpi711/helpdata/EN/ea/c91141e109ef6fe10000000a1550b0/frameset.htm
2. The server certificate chain contains expired certificate. Check for it (that was the cause for other customers as well) and if it's the case renew it or extend the validation.
3. Some other customers have reported similar problem and mainly the problem was that the certificate chain was not in correct
order. Basically the server certificate chain should be in order Own->Intermedite->Root. To explain in detail, if your server certificate is A which is issued by an intermediate CA B and then B's certificate is issued by the C which is the root CA (having a self signed certificate).
Then your certificate chain contains 3 elements A->B->C. So you need to have the right order of certificate in the chain. If the order is B first followed by A followed by C, then the IAIK library used by PI cannot verify the server as trusted. Please generate the certificate in the right order and then import this certificate in the TrustedCA keystore view and try again. Please take this third steps as the principal one.
4. If the end point of the SOAP Call(Server) is configured to accept a client certificate(mandatory), then make sure that it is configured correctly in the SOAP channel and it is also within validity period.
(This certificate is the one which is sent to Server for Client authentication)
As a resource, you may need to create a new SSL Server key.
The requirement from SAP SSL client side is that the requested site has to have certificate with CN equal to the requested site. I mean if I request URL X then the CN must be CN=X.
In other words, the CN of the certificate has to be equal to the URL in the ftp request. This can be the IP address or the full name of the host.
Request the url with the IP of the SSL Server and the certificate to be with CN = IP of the server.
In any other case the SSL communication will not work.
Regards,
Caio

Receiver SOAP Communication Channel Error

Hi,
I am trying to post a file to a WebService but facing the below error in the communication channel :
Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: SOAP: response message contains an error XIAdapter/PARSING/ADAPTER.SOAP_EXCEPTION - soap fault: Server was unable to process request. ---> Object variable or With block variable not set.
Has anyone encountered such an error?
Please let me know.
Regards,
Anuradha.

Hi,
First of all check the URL in your receiver SOAP adapter. The error comes from the web service server. It says that the request message is wrong.
1.fill field SOAPAction in the receiver soap adapter
2.fPlease find the related information here
http://help.sap.com/saphelp_nw2004s/helpdata/en/29/5bd93f130f9215e10000000a155106/content.htm
Please check this one also:
/people/shabarish.vijayakumar/blog/2006/03/23/rfc--xi--webservice--a-complete-walkthrough-part-1
There are multiple soap actions listed there.
Regards,
Divya

Youtube (https)security certificate issue

Hi
I'm using latest firefox version with and recently I'm facing this strange issue ... everytime I try to visit youtube, to be specific, when not logged in on any google accounts .. I can visit http://www.youtube.com but when I try to login, in which case it redirects to https:// and It shows the following error(check image url):
https://imageshack.com/i/ezbe0c53j
And if I try to add exception, it shows this screen(check image url):
https://imageshack.com/i/hj41802cj
(PS: Couldn't find upload option here so I had to use otherimage hosts)
Also I tried changing windows time, adding auto time sync from windows site and also tried changing profile, disabling add on and testing and also tried removing cache/cookies from both google.com and youtube.com and so far nothing worked ... I can't seem to access youtube while logged in (https)
Also its only youtube, no other website shows this security certificate error!
please provide a solution to this asap, thanks!

When you click Add Exception, you get a Google error page instead of a pop-up dialog? Or are you saying that after you added the exception, YouTube's home page won't load. That's mildly suspicious...
If you return to the Add Exception dialog and use the View button, how does the certificate compare with the attached screen shot?

Urgent - NAC+ACS+Web-Auth in Wired environment - https redirection - Certificate Issue

Hi everyone.
I'm seting up an environment which uses Web-Auth for my wired and wireless networks. I have followed the exact same steps in this Cisco page to get it working:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/app_note_c27-577490.html
I'm only testing the wired environment right now.
I plug a PC to a port, and I try to get access to a randon internet page (for example www.cisco.com) . It is automatically redirected to authentication page. I type the username and password, but, when authentication passes, it goes automatically to https version of the page, which brings me to the problem. I have to add an exception (continue on this webpage option on IE) to that page in order to continue with the authentication and get the access to the internet. I'm attaching the steps I have to perform:
I think it is related to Certificate, but I'm not quite sure which or where. I'd like to have some advices from you to avoid this problem. I'm not planning to buy any certificates, so if I could skip the https would be great.
Thanks a bunch for your help
Victor Alves

You need a certificate that your client will trust.
Easy way is to buy one from an official source. All PC browsers have a list of the major cert vendors so that's automatically trusted.
You could issue the certificate yourself also, for free :
-Self signed : the signing authority is the switch ... That means you need all your PCs to trust all your switches. Manual operation ...
-You create an enterprise CA and create a certificate for all your switches : you just need your clients to trust your enterprise CA so that's still a manual task but a simpler one.
When laptops are integrated in a domain, it's usually easier to create your CA on windows server and push the certificates to the clients automatically

Receiver SOAP adapter issue

Hi Experts,
I am getting the below error in the receiver SOAP communication channel. "Delivering the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.net.ConnectException: Connection timed out."
Please help me.
Thanks,
--Naresh

naresh j wrote:
Hi,
>
> 1. I am able to open the webservice from my browser.
> 2. I am able to send the data to webservice through SOAP UI. But getting the error while sending the same data from PI.
>
> What else i can check.? Please advice.
>
> --Naresh
are you able to ping or telnet the host server where the WS is hosted from the PI server?
The issue is that the PI server IP addresses might not be opened in the firewall to connect to the web service.

Send attachment with receiver SOAP adapter

Dear Guru's,
We have created a scenario SAP ERP (ABAP Proxy) -> PI 7.0 -> (Webservice) OSB.
In the ABAP Proxy have we attached a file (jpg). In the SXMB_MONI we see first the file (named attach), and second the MainDocument. It seem's this is the wrong sequence.
We tried to correct this with AF_Modules/PayloadSwapBean in the receiver SOAP adapeter, but it does not work.
There are blogs who tells about how to configure the parameters. We did it as follows:
AF_Modules/PayloadSwapBean swap1
AF_Modules/PayloadSwapBean swap2
swap1: swap.keyName = payload-name
swap1: swap.keyValue = attach
swap2: swap.keyName = payload-name
swap2: swap.keyValue = MainDocument
In the communication channel audit log the swap is processed succesfully, but we don't see nothing changing in the message sequence.
Can somebody please help me with this issue?
Kind regard,
Jeroen Jung

Hi Stefan,
The main thing at this moment is to change the sequence of the payload and attachement. PI puts the attachement first and than the payload and in that sequence the receiver application can't deal with it.
This is a multipart related message and in the header it refers to the image (image/jpeg) first instead of the payload (application/xml).
As you can see in the first message we have used PayloadSwap Adapter module in the receiver SOAP Communication Channel to change this sequence and in the Audit Log of the SOAP CC we can see that it does SWAP functionality succesfully but the result is the same and nothing happens.
Here below you can see the result of a http snapper grabber:
POST /EnterpriseContentManagement/ProxyServices/PS_EnterpriseContentManagement_v1 HTTP/1.0
Accept: */*
Host: localhost:8090
User-Agent: SAP-Messaging-com.sap.aii.messaging/1.0505
CallingType: SA
Content-Type: multipart/related; boundary=SAP_00e371ef-3ca3-11df-9503-001f2966194a_END; type="image/jpeg"; start="payload-9A6BAB4B2FE1273DE10000000A503151 @ sap.com"
Content-Length: 939196
SOAPACTION:
--SAP_00e371ef-3ca3-11df-9503-001f2966194a_END
content-id: payload-9A6BAB4B2FE1273DE10000000A503151 @ sap.com
Content-Type: image/jpeg
*********binary attachment data************
--SAP_00e371ef-3ca3-11df-9503-001f2966194a_END
content-id: payload-9B6BAB4B2FE1273DE10000000A503151 @ sap.com
Content-Type: application/xml
<?xml version="1.0" encoding="utf-8"?>
*********XML Message************
--SAP_00e371ef-3ca3-11df-9503-001f2966194a_END--
Do you have an idea how we can switch the sequence of payload and the attachment? Or why the SWAP functionality doesn't have any result?
Kind regards,
Danke
Jeroen Jung

Receiver SOAP : Parsing SOAP Exception

Hello
We have a simple scenario SOAP scenario and we are calling backend service in our Receiver SOAP
It seems that issue is with the SOAP Action.
Our backend service has multiple SOAP Actions :
Endpoint is as follows
http://serverID/ABCSoftware/ABCdataexchange.asmx
The SOAP Action is given as follows
http://ABCSoftware.net/SOAPAction
We are getting the following error
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">
<SAP:Category>XIAdapter</SAP:Category>
<SAP:Code area="PARSING">ADAPTER.SOAP_EXCEPTION</SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText>soap fault: System.Web.Services.Protocols.SoapException: Server was unable to read request. ---> System.InvalidOperationException: There is an error in XML document (1, 266). ---> System.FormatException: Input string was not in a correct format. at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal) at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info) at System.Xml.XmlConvert.ToInt32(String s) at Microsoft.Xml.Serialization.GeneratedAssembly.XmlSerializationReader1.Read40_Item(Boolean isNullable, Boolean checkType) at Microsoft.Xml.Serialization.GeneratedAssembly.XmlSerializationReader1.Read141_AllocatedResourceDetails() at Microsoft.Xml.Serialization.GeneratedAssembly.ArrayOfObjectSerializer172.Deserialize(XmlSerializationReader reader) at System.Xml.Serialization.XmlSerializer.Deserialize(XmlReader xmlReader, String encodingStyle, XmlDeserializationEvents events) --- End of inner exception stack trace --- at System.Xml.Serialization.XmlSerializer.Deserialize(XmlReader xmlReader, String encodingStyle, XmlDeserializationEvents events) at System.Xml.Serialization.XmlSerializer.Deserialize(XmlReader xmlReader, String encodingStyle) at System.Web.Services.Protocols.SoapServerProtocol.ReadParameters() --- End of inner exception stack trace --- at System.Web.Services.Protocols.SoapServerProtocol.ReadParameters() at System.Web.Services.Protocols.WebServiceHandler.CoreProcessRequest()</SAP:AdditionalText>
<SAP:Stack />
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
We appreciate your assistance with the issue.
Thanks.
Kiran

Hi Kiran
As you have multiple SOAP action. WSDL can have only one and can be used per communication channel.
Looking at your error its a XML serialization issue - exception with parser. Your XML input is not correct. If changes are made in your system / target system for the WSDL used. Reimport corrected one and try again
Thanks
Gaurav

Error using SSL on Receiver Soap Adapter

Hi there,
I'm having some problems on connecting to a third-party application running a webservice (meaning, through Receiver Soap Adapter). The third-party appl. demands us to use a SSL connection (its url starts with https), with user authentication through certificate.
We've installed SAP Java Cryptographic toolkit and have a proper certificate configured on the KeyStorage entry, on Visual Administrator.
On Soap Adapter, I've configured HTTP Transport Protocol and have selected the "configure certificate authentication" option and selected the certificate, filled the mandatory fields (target URL and soap action) but I keep getting this error message on SXMB_MONI: "com.sap.aii.af.ra.ms.api.DeliveryException: unable to create a socket".
Is there anything else than installing SAP Java Cryptographic Toolkit to enable SSL on Soap Adapter? Is there another configurations that need to be done?
Thanks in advance,
Henrique.

Hi
can u please tell me, how u r able to resolve the problem
i am also stuck in the same error
basically i am working on SSO b/w three systems.
EP>XI>R/3
i am able to do the SSO between the EP-->XI
but when i try with EP-->XI->R/3 it is giving me error at the receiver side means receiver soap adapter is not accepting the SAP Logon Ticket.
can u please tell me what entries should be given in the certificate authentication fields.
please provide the solution.
Thanks & Regards
Rinku Gangwani

Using the SOAP inbound channel of the Integration Engine

Hi,
I am following the blog of Stefan Grube.
/people/stefan.grube/blog/2006/09/21/using-the-soap-inbound-channel-of-the-integration-engine
However I have difficulties.
Is this blog still relevant for SAP PI7.10?
I have set this up as a test for a scenario I have.
Current Scenario NOT using your Blog and working perfectly.
SandBox PI       Development PI
File > SOAP >   SOAP > ABAP Proxy
What I am attempting now is.
SandBox PI      Development PI
File > SOAP > Integration Engine > ABAP Proxy
I am using our SAP PI Sandbox to push a SOAP message using a Receiver SOAP adapter channel.
Transport Protocol: u201CHTTPu201D
Message Protocol: u201CSOAPu201D
Conversion Parameters:      u201CDo not Use SOAP Envelopeu201D
Target URL: u201Chttp://<Integratio Server Host Development PI>:<Port>/sap/xi/engine?type=entry&version=3.0&Sender.Service=FigmentD&Interface=urn:figment-co-za:fleetcard:efuel_50ppm^oa_Msg50ppm&QualityOfService=ExactlyOnce&sap-user=<PIAPPLUSER>&sap-password=<PASSWORD>u201D
SOAP Action: u201Chttp://sap.com/xi/WebService/soap1.1u201D
I am however getting the following error on the SandBox Pi AE.
u201CSOAP: call failed: java.io.IOException: invalid content type for SOAP: TEXT/HTML; HTTP 302 MOVED TEMPORARILYu201D
Please can you assist in this matter.
Regards
Willie Hugo

Hi williem,
Stefans weblog works great. The error you are getting is some wrong data you are sending. Please verify the data you are sending is correct. Also check this threads for the same errror:
ADAPTER.HTTP_EXCEPTION / HTTP 302 Moved Temporarily
Re: SOAP client receives HTTP 302 Found
Re: Synchronous RFC-XI-Web Service with no request method
HTTP Error (302) Found when calling Web Service on XI
Regards,
---Satish

ResourceMultiParentClassLoader-3d19dc64-alive - ERROR in SOAP Recvr Channel

Hi,
We have a WS Sender to SOAP Receiver scenario :- The message from the IE has been processed but has failed in the adapter and throws the below error :-
Audit Log of Receiver SOAP Communication Channel :-
=================================================================================================
14.06.2011 07:04:32 Error Adapter Framework caught exception: java.lang.ClassCastException: class com.sap.aii.af.sdk.xi.mo.xmb.XMBSystemError:library:com.sap.aii.af.sdk.lib.com.sap.engine.boot.loader.ResourceMultiParentClassLoader-3d19dc64-alive incompatible with interface com.sap.aii.af.sdk.xi.mo.Item:library:com.sap.aii.af.sdk.lib.com.sap.engine.boot.loader.ResourceMultiParentClassLoader-3d19dc64-alive
14.06.2011 07:04:32 Error Delivering the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.lang.ClassCastException: class com.sap.aii.af.sdk.xi.mo.xmb.XMBSystemError:library:com.sap.aii.af.sdk.lib.com.sap.engine.boot.loader.ResourceMultiParentClassLoader-3d19dc64-alive incompatible with interface com.sap.aii.af.sdk.xi.mo.Item:library:com.sap.aii.af.sdk.lib.com.sap.engine.boot.loader.ResourceMultiParentClassLoader-3d19dc64-alive.
=================================================================================================
need some suggestions as to what went wrong?!!

Hello
Check the note #1452307 Sync-XI resp-message fails with ClassCastException in PI 711. Are you on a lower patch release?
Are you using any modules in the adapters? Use the tool in note #1514898 Diagtool for troubleshooting XI, to get better trace information.
Regards
Mark

Issue when receiving SOAP message with HTTPS on non-central adapter engine

Hi,
we have a central XI system (PI 7.1 EHP1 SP03) and a non-central adapter engine (XI 3.0) in the DMZ, both systems on HP-UX.
In the affected configuration scenario, a business partner is sending us IDocs (INVOIC.INVOIC01) over HTTPS with Certificate Authentication and without SOAP Envelope.
The configuration and security settings seem to be correct, because we've already received several messages successfully over this connection. Now, since several weeks no message arrives anymore in our system, while the business partner always gets a HTTP_OK_200 response. So the messages seem to be accepted by our system, but nothing is shown, neither in the MessageMonitoring or CommunicationChannelMonitoring of the Runtime Workbench, nor in the in the traces/logs of the NetweaverAdministrator (trace level = DEBUG for "com.sap.aii.adapter.soap").
I also removed the assigned user in the sender agreement which should cause a HTTP_500_error on sender side, but our business partner still got a "OK_200" notification and we didn't find any information in the trace of our system.
When using TCPGateway to trace the communication, I can see an arriving message and the response, but it's encrypted because of HTTPS.
1) Did anyone have similiar issues yet?
2) Are there any further possibilities to check if an incoming message at the SOAP adapter fails?
3) Which further trace settings can be done, to get most detailed informations about the soap traffic?
4) Is there a way to decrypt the message of the TCPGateway (e.g. with private key of server)?
I'm looking forward for any helpful hints or information!
Regards,
Juergen

Issue solved by SAP note 1115650 "J2EE Engine kernel.sda SP20 cumulative patch"

SOAP Receiver Adapter Certificate issue

Hello Gurus,
i m working on RFC to SOAP scenario on SAP PI 7.3 and need help about SSL credentials.
We have been testet with SOAP UI Tool successfully (without Certifcates). Why not with PI?
Now we are facing an issue like
"iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier".
What should we do to solve this issue?
Target SOAP Url; https://www.xxx.com/PartnerCard/Partner.asmx
Kind Regards,
PM

Hi,
One more thing to check: while testing the connection from SOAP UI, did you use the same URL with https? Because, for instance for the web services generated in PI, you get two separate bindings: for http and https connections. So if using the secure https channel is not your requirement, you could just use the http binding from PI in your scenario.
Hope this helps,
Greg

Receiver SOAP HTTPS channel certificate issue in SAP 7.31

Similar Messages

Maybe you are looking for