Tag: NetWeaver Administrator (NWA)

Peer certificate rejected by ChainVerifier

Peer certificate rejected by ChainVerifier

Scenario

In a scenario with a SSL encrypted (HTTPS) SOAP target URL in the SOAP receiver channel, the message goes into an error state.

Error

The following error is shown in Message Log in PIMON:

SOAP: Call failed: java.io.IOException: Failed to get the input stream from socket: iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier

Solution

The SSL certificate needs to be imported into PIs keystore.

Download the certificate from the target server
  1. Open the Target URL in Chrome (or any other Browser)
  2. Open the developer tools by clicking on the three dots -> More Tools -> Developer Tools (Shortcut STRG + SHIFT + I)

    Chrome: Open developer tools
    Chrome: Open developer tools
  3. Go to the “Security” Tab and click on “View certificate”
  4. Go to the Details Tab and click on “Copy to file” button
  5. Click on the “Next” button and select “DER-codet-binary X.509 (.CER)”

    Download Certificate
    Download Certificate
  6. Click on “Next” button and select a destination on you local PC
Import certificate into keystore
  1. Open the Netweaver Administrator (http://your.pi:port/nwa)
  2. Go to Configuration -> Security -> Certificates and Keys
  3. Select the “Trusted CAs” View and click on “Import Entry”
  4. Select entry type “X.509 Certificate”, enter the path to the certificate you downloaded before and click on “Import”

    Certificates and Keys: Import entry
    Certificates and Keys: Import entry
  5. Resend your message

If your error is not resolved, open the certificate again and click on certification path. Afterwards, double click the first and second certificate (one after each other), save them and also import them into the TrustedCAx view.

Find complete BPMN error traces

Find complete BPMN error traces

Scenario

During the development of a BPMN on SAP Process Orchestration you will probably arrive at a point where your Process does not work as expected. One way to find the issue is to check the traces in the Log Viewer, to find out more about the error.

Find the traces in the Log Viewer

  1. Triggered the BPMN to run again
  2. To check the BPM Status open PIMON (http://your.po:port/pimon)
  3. Go to Monitoring -> Processes and Tasks -> Manage Process
  4. Open the “History” Tab and select “Show: Advanced”. You can find the Log ID in the log entries below.
    Manage Processes: Find Log Id
    Manage Processes: Find Log Id

    If the following message is shown:

    For more details, decrease severity of log controller as described in SAP Note 1753560.

    Please check the section Increase BPMN Trace level and afterwards start again with step 1.

  5. Open  the NetWeaver Administrator (http://your.po:port/nwa)
  6. Got to Troubleshooting -> Logs and Traces -> Log Viewer
  7. Open View -> Open View -> System Logs and Traces

    Open "System Logs and Traces" view in Log Viewer
    Open “System Logs and Traces” view in Log Viewer
  8. Add a filter for Log ID and enter the Log ID out of the “Manage Processes” View

    NWA Log Viewer: Filter for LogId
    NWA Log Viewer: Filter for Log ID
  9. You can find the whole error trace in the filtered results.

Increase BPMN trace level

To increase the BPMN trace level follow the steps below:

  1. Open  the NetWeaver Administrator (http://your.po:port/nwa)
  2. Go to Configuration -> Infrastructure -> Log Configuration
  3. Select “Show: Tracing Locations”
  4. Click on “Open Filter” and filter for Location “BPMNException”
  5. Change Severity for location “ExceptionAdapter$BPMNException” to “ALL”

    NWA Log Configuration: Increase Severity for ExceptionAdapter$BPMNException
    NWA Log Configuration: Increase Severity for ExceptionAdapter$BPMNException
  6. Click on “Save Configuration” and trigger your BPMN again

Also, check out SAP Note 1753560.

“Start Process” in Process Repository is disabled

“Start Process” in Process Repository is disabled

Scenario

If you develop a BPMN, you probably have to manually trigger the process multiple times to check that everything works as expected. One way to trigger a BPMN is the usage of the “Start Process” function in the Process Repository.

You can find the Process Repository in the NetWeaver Administrator -> Processes and Tasks -> Process Repository.

Error

The “Start Process…” button in the Process Repository is disabled.

"Start Process..." button in Process Repository is disabled
“Start Process…” button in Process Repository is disabled

Solution

The role “SAP_BPM_SuperAdmin” is necessary to use the “Start process…” function. To add the role to your user, follow the steps below:

  1. Open the NetWeaver Administrator (http://your.pi/nwa)
  2. Go to Configuration -> Security -> Identity Management
  3. Select you User and open the “Assigned Roles” Tab
  4. Click on “Modify” and search for the role “SAP_BPM_SuperAdmin”
  5. Select the role, click on “Add” and afterwards on “Save”
    Add role SAP_BPM_SuperAdmin to user
    Add role SAP_BPM_SuperAdmin to user

     

After refreshing the repository browser, the “Start Process…” button should be available.