Connecting to Workflow API from ABAP: SSSLERR_SERVER_CERT_MISMATCH

[MioYasutake]

Hi experts,

I'm trying to call workflow web APIs from ABAP system(Developer Edition) by referring to below blog post.

https://blogs.sap.com/2019/07/24/call-sap-cloud-platform-workflow-from-abap-using-an-oauth-access-to...

I have created two destinations in SM59, one for oAuth token endpoint, and the other for API endpoint. I have imported certificates for both endpoints. (Below images are imported certificates in STRUST)

• Certificate for oAuth token endpoint

• Certificate for API endpoint

I tested connection from SM59, and for the oAuth token endpoint it was successful. However, for the API endpoint, I'm receiving the following error.

SSL handshake with
api.workflow-sap.cfapps.eu10.hana.ondemand.com:443
failed: SSSLERR_SERVER_CERT_MISMATCH (-30)#Server
certificate does not match supplied TargetHostname
(rfc2818 section
3.1)##SapSSLSessionStartNB()==SSSLERR_SERVER_CERT_
MISMATCH#  TargetHostname     =
"api.workflow-sap.cfapps.eu10.

Below images are destination settings for the API endpoint.

Below log is the result of ICM trace.

[Thr 139929970353920] *** ERROR => SSL handshake with api.workflow-sap.cfapps.eu10.hana.ondemand.com:443 failed: SSSLERR_SERVER_CERT_MISMATCH (-30)
[Thr 139929970353920] Server certificate does not match supplied TargetHostname (rfc2818 section 3.1)
[Thr 139929970353920]
[Thr 139929970353920] SapSSLSessionStartNB()==SSSLERR_SERVER_CERT_MISMATCH
[Thr 139929970353920]   TargetHostname     = "api.workflow-sap.cfapps.eu10.hana.ondemand.com"
[Thr 139929970353920]   ServerCert.subject = <CN=*.cf.eu10.hana.ondemand.com, O=SAP SE, L=Walldorf, C=DE>
[Thr 139929970353920]   ServerCert.SANs    = dNSName=*.authentication.cert.eu10.hana.ondemand.com, dNSName=authentication.cert.eu10.hana.ondemand.com, dNSName=*.cert.c
[Thr 139929970353920]   SSL NI-hdl 114: local=172.17.0.2:41702  peer=3.124.208.223:443
[Thr 139929970353920]  {0002007e} {root-id=0242AC1100021EDB8BD5D969FA63F098} [icxxconn.c 2419]
[Thr 139929970353920]              GUI T4_U46_M0, 001, DEVELOPER, DESKTOP-4N6I49U, time=00:20:40, W0, program=RSHTTPPIN, high priority, memory=0, tasks=1, appl info=,
[Thr 139929970353920]              role: Client, protocol: HTTPS, local: 172.17.0.2:41702, peer: 3.124.208.223:443

It looks as if the server wrongly picked token endpoint's certificate, instead of API endpoint. Does anybody has an idea how to solve this issue?

Regards,

Mio

[MioYasutake · Accepted solution]

The issue has been resolved after applying the solution suggested here.

https://answers.sap.com/questions/599994/ssslerrservercertmismatch.html

[sankar_27]

Hi Mio

have you enabled the SSL port ( 443 )? If yes update the technical settings in RFC destinations

Thanks , Sankar

[MioYasutake]

Hi sankar_27,

Thank you for your response.

I think SSL is active because the request to oAuth token endpoint (which is also SSL) is successful. (I'm not basis person and don't know how to check this)

Below is technical settings of the API endpoint.