Posts

Showing posts from October, 2020

NIECONN_REFUSED issues during sapcontrol execution and sapcontrol debug option

This is a website that helps how to resolve issues with sapcontrol https://blogs.sap.com/2015/09/07/how-to-solve-nieconnrefused-issues-during-sapcontrol-execution/ Also some additional points: Check the directory /sapmnt/<SID>/global/sapcontrol for multiple log files having some numbers_portno._<Instance no._hostname Those need to be removed for a particular instance which is not getting started or identified. And run the sapstartsrv command for particular instance. You can also find the exact root cause of the problem with below debug option: /usr/sap/<SID>/<instance>/exe/sapcontrol -prot NI_HTTP -nr <inst number> -function GetInstanceProperties -debug Snote: 2192740 - sapcontrol : -debug option does not show debug information

SSL handshake with .....:443 failed: SSSLERR_PEER_CERT_UNTRUSTED

Problem: SSL handshake errors are listed in dev_icm file despite the correct ciphersuite settings Solution: Always refer to 510007 - Additional considerations for setting up SSL on Application Server ABAP for the correct settings. Check what protocols are supported by the client . This can be checked from the Chrome browser (Cntrl+Shift+I --> in the security overview ) Check if the ciphersuites on SAP supports the client settings. This can be checked from sapgenpse command line ( sapgenpse tlsinfo <ciphersuite combination>  Upload the client's SSL certificates in STRUST client standard Check if your client is requesting SNI Ensure the following parameters are set in accordance Recommended Configuration of Available TLS Protocol Versions (required for enabling TLSv1.2) Over the course of year 2016, a growing number of TLS servers were reconfigured to abort/reject TLSv1.0 handshakes, or they are requring forward secrecy (PFS) cipher suites for access. The currently re...