java.io.IOException: java.net.SocketException: Connection reset

[former_member764396]

Hi Experts,

I am facing the java.io.IOException: java.net.SocketException: Connection reset error in production. scenario is Proxy to Rest (synchronous). We have reimported the SSL certificates in Production system. After importing we are facing this error. Please help on this.

regards,

nagaraju

[Harish]

Hi Nagaraju,

Please check if the TLS version or cipher suits are changed from the service, Please refer the below SAP notes

note 2295870 - TLSv1.2 support in REST adapter

note 2284059 - Update of SSL library within NW Java server

regards,

Harish

[former_member764396]

Hi Harish

sorry for the late response.

till now issue not resolved.

regards,

nagaraju

[Harish]

Hi Nagaraju,

Please check if the IP is changed from the target server. You can also ask the basis team to perform the check (Curl request) from the server to the target.

regards,

Harish

[former_member764396]

Hi Harish,

Issue resolved. My Basis person resolved the issue. These are the steps implemented.

Create a SSLContext.porperties files with reference to the note 2569156 - How to create, modify and validate SSLContext.properties file

Create a folder /tmp/SSLCONTEXT and place the file "SSLContext.properties".

Add the parameter in Additional VM Parameters parameter name: -Diaik.security.ssl.configFile value: file:/tmp/SSLCONTEXT/SSLContext.properties.

Change the parameter "crypto.policy = unlimited policy" in java.security p

path : /sapmnt/UEP/exe/jvm/linuxx86_64/sapjvm_8.1.075/sapjvm_8/jre/lib/security

Reference note: 2881916 - Unable to encrypt SSL message: java.security.InvalidKeyException: Illegal key size

Restart the SAP PO.

Below are the Sap Note Reference:

2881916 - Unable to encrypt SSL message: java.security.InvalidKeyException: Illegal key size.

3007243 - Error retrieving certificates after changing SSLContext.properties file

2708581 - ECC Support for Outbound Connections in SAP NW AS Java

2284059 - Update of SSL library within NW Java server

Thanks Harish for given valuable information to us.

Thank you Metin for your response.

Regards,

nagaraju

[Harish]

Hi Nagaraju,

Do you have the XPI inspector logs for this? it will provide more inside on which stage it is failing.

also please check if as part of SSL renewal the server IP is changed and required any update on the firewall.

regards,

Harish

[former_member764396]

Hi Harish,

XPI inspector logs also showing same. please provide any solution for this.

regards,

nagararju

[MetinD]

Hi,

I think it is a network problem.They should give access for the service from firewall.

[Sadullah75]

Yep, I got the same error. And after solving internet connect or quality of it, that works. Thank you for this simple solution, otherwise I'd do lots of redundant work.