SAP Cloud connector HTTPS connection to backend fails

[andreschgz95]

Hello SAP experts.

I'm connecting SCC version 2.11.2 to SAP ERP 6.0 EHP 7 with Netweaver 7.40 SP4. The configuration for HTTP connection works fine as you can see in image below, but not for HTTPS:

This is the configuration in SCC side:

I'm doing this in order to have Principal Propagation enabled, so the SCC system certificate is uploaded in STRUST tcode in ERP side:

The error in ICM trace is the following:

In SCC logs I have the following:

So what I think is that everything in SCC side is working fine, but there is missing configuration in ERP side, maybe related to SSL or TLS.

Do you have some idea of what is going on?

PD: I'm using right HTTPS port and SCC is installed on the same server than ERP is, so it is not a ports issue I think. The mapping rule was successful in CERTRULE tcode

BR.

[andreschgz95]

Hello Markus, thanks for your reply.

I connected SCC version 2.12.3 as you recommended and activated TLS trace. What I can find in ljs_trace.log is the following: ljs-truncated-editedforsapblog.txt

There is also the Audit log from SCC:

I don't see anything wrong in SCC side. On the other hand even when the log entries didn't change on ICM side, there is something that gets me curious about that trace:

Do you think the error may have something to do with this "ERROR during SecuSSL SessionStart"?

Since the error in ljs_trace.log points to "illegal_parameter" I'm thinking maybe it is something related to the activation of TLS1.2 or something like that in ERP side. What do you think about that?

BR.

Andrés Chacón.

ljs-truncated-editedforsapblog.txt