首页 > 解决方案 > 在 SAP 上使用 Google Maps API 时遇到 SSL 问题

问题描述

我有一个在 SAP 上使用 Google Maps API 开发的地理定位器,并通过带有 XML 模式的 url 连接到 Google Maps WS,但是当我收到响应时,我收到了下面显示的错误。SAP Application Server 已经安装了一些 CA(甚至是 Google Internet Authority G3),但开发仍然无法正常工作。知道我能做些什么来解决这个问题吗?我会很感激的。

500 SSL Peer Certificate Untrusted

SSL handshake with maps.googleapis.com:443 failed: SSSLERR_PEER_CERT_UNTRUSTED (-102)


The peer's X.509 Certificate (chain) is untrusted

SapSSLSessionStartNB()==SSSLERR_PEER_CERT_UNTRUSTED
  SSL:SSL_read() failed  (536872221/0x2000051d)
  => "Failed to verify peer certificate. Peer not trusted."
  SSL:SSL_get_state()==0x2131 "TLS read server certificate B"
  SSL NI-hdl 90: local=10.0.4.146:25023  peer=172.217.8.10:443
  cli SSL session PSE "/usr/sap/SED/DVEBMGS00/sec/SAPSSLC.pse"
  session ciphersuites=HIGH:MEDIUM:+e3DES:!aNULL
  Client SSL_CTX 7f0d8006f830 pvflags=128 (TLSv1.0)
  Target Hostname="maps.googleapis.com"
>> ---- SecuSSL ErrStack: ----
0x2000051d | SAPCRYPTOLIB | SSL_read
SSL API error
Failed to verify peer certificate. Peer not trusted.
0xa0600203 | SSL | ssl3_read_bytes
Peer not trusted
0xa0600203 | SSL | ssl3_connect
Peer not trusted
0xa0600203 | SSL | ssl3_get_server_certificate
Peer not trusted
0xa0600203 | SSL | ssl3_decode_server_certificate
Peer not trusted
0xa0600203 | SSL | ssl_verify_peer_certificates
Peer not trusted
0xa0600203 | SSL | ssl_cert_checker_verify_certificates
Peer not trusted
0xa0600203 | SSL | ssl_cert_checker_verify_certificates
Peer not trusted
Certificate:
 Certificate:
  Subject:                              CN=*.googleapis.com, O=Google LLC, L=Mountain View, SP=California, C=US
  Issuer:                               CN=Google Internet Authority G3, O=Google Trust Services, C=US
  Serial Number:                        7C:C5:3D:5F:59:B7:CC:33
 Verification result:
  Status:                              Not successful
  SignerStatus:                        Not successful
  SignerVerificationResult:
   Status:                              Not successful
   Validity:                            Successful
   BasicConstraints:                    Successful
   KeyUsage:                            Successful
   ObjectStatus:                        Not successful
   SignerCert:
    Certificate:
     Subject:                              CN=Google Internet Authority G3, O=Google Trust Services, C=US
     Issuer:                               CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2
     Serial Number:                        01:E3:A9:30:1C:FC:72:06:38:3F:9A:53:1D
    Verification result:
     Status:                              Not successful
     SignerStatus:                        Not successful
     SignerVerificationResult:            None

<< ---------------------------



Error: -48 
Version: 7490 
Component: ICM 
Date/Time: Mon Nov 5 16:46:06 2018  
Module: icxxconn.c 
Line: 2240 
Server: gserpsed_SED_00 
Error Tag: {000006e1} 

标签: google-mapsabap

解决方案


您的日志说,在 SSL 客户端(Stanadart)中找不到证书链。您需要在 t-code STRUST 中检查添加到此证书库的根证书。SAP Netweaver 可以有多个证书列表,其中一个可以设置为默认值。如果您没有在代码中确定它,则使用默认值。

信任


推荐阅读