topic SM59-HTTPS type G connection in Application Development and Automation Discussions

SM59-HTTPS type G connection

Former Member — Thu, 15 Jul 2010 21:01:33 GMT

Hello ABAP Gurus,

I have issue to consume web service. I am trying to consume web service form external plm server. it has https protocol. For this i tried to create rfc type G for external server but I am wondering that what i need to know to create rfc to ping https web service. I created rfc but not able to ping by sm59 and only reason i am finding is this it is http not https but i am sure you can create rfc for https also. we are on ecc6.0 and SAP_ABA patch level 21. I will greatly appreciate if someone can help me out from this issue.

Thanks in advance.

Regards.

Dave

Re: SM59-HTTPS type G connection

brad_bohn — Thu, 15 Jul 2010 21:16:33 GMT

Is the RFC destination definition using service 443 and the other relevant settings for HTTPS? Do you have HTTPS configured on your system (does SMICM show that the HTTPS service is running on port 443)? If not, your system profile needs to be set for HTTPS.

Re: SM59-HTTPS type G connection

Former Member — Fri, 16 Jul 2010 19:30:48 GMT

Hi Brad,

Thanks for reply to my query. I already checked those thing before posing here. I checked on help sap and find this. I am curious to know is it possible that destination host port is not configured to understand protocol HTTPS. Do you know any debugging technique to find exact problem.

Thanks in advance.

Regards,

Dave

Re: SM59-HTTPS type G connection

brad_bohn — Fri, 16 Jul 2010 20:40:18 GMT

Well, it could be a number of things causing the issue. Generally, when I have a problem making an HTTP or HTTPS connection though, I will crank the trace settings all the way up in SMICM and then use the trace files/logs to determine the issue. You'll be able to determine if the issue is on your end or the other end and possibly the root cause. If the issue is on the other side not related to the format of your call, I would contact the technical support on the other side and have them view the inbound request and tell you what's wrong.

Re: SM59-HTTPS type G connection

Former Member — Fri, 23 Jul 2010 14:29:42 GMT

Hi Brad,

Creating the SSL Server PSE

http://help.sap.com/saphelp_nw70/helpdata/en/20/37c33ae8361838e10000000a11402f/content.htm

Is this mandatory step to consume PLM web service(HTTPS).

SMICM TRACE ERROR SCREEN SHOT ( THAT IS WHAT I AM GETTING IN TRACE)--

[Thr 6644] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL

[Thr 6644] session uses PSE file "E:\usr\sap\GTX\DVEBMGS10\sec\SAPSSLC.pse"

[Thr 6644] SecudeSSL_SessionStart: SSL_connect() failed

secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"

[Thr 6644] >> Begin of Secude-SSL Errorstack >>

[Thr 6644] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed #

ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "OU=Class 3 Public Primary Certification Auth

ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete #

[Thr 6644] << End of Secude-SSL Errorstack

[Thr 6644] SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"

[Thr 6644] No certificate request received from Server

[Thr 6644] <<- ERROR: SapSSLSessionStart(sssl_hdl=00000000015BB9F0)==SSSLERR_SSL_CONNECT

[Thr 6644] <<- SapSSLErrorName()==SSSLERR_SSL_CONNECT

[Thr 6644] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn.c 2032]

Thanks for all your valuable inputs.

Regards,

Dave

Re: SM59-HTTPS type G connection

cris_hansen — Mon, 26 Jul 2010 18:33:16 GMT

HI Dave,

SAP notes 1094342 and 1318906 should be used to understand the error messages from the dev_icm trace file.

Once you find the missing certificates, you should be able to import them into the relevant PSE (SAPSSLC.pse).

I hope this helps,

Cristiano