Unable to load metadata of fiori apps in WebIDE.

[mayur_01]

Hello SAP Experts,

I'm unable to load metadata of fiori apps in WebIDE, but when we cross-check this issue in Development, Quality and Production metadata gets load. so facing this issue locally in WebIDE. see the below error which gets display while loading metadata.

error :

javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_expired

Please look into this issue and provide solution asap.

Thank you in advance.

[Ulrich_Schmidt]

You will need to find out, where exactly this SSLHandshakeException is happening, and then updating the expired certificate with a fresh one. There are several SSL connections involved here:

1. The connection from your browser to this webidetesting app. (But I think, if something were wrong with this connection, we would see an error message directly from the browser, and not an html page containing this Java error message?!)
2. So more likely, the connection to the app is working fine, and the app is then running into an error and returning this simple error message response to the browser. In this case, the problem could be the connection between the webidetesting app and the SCC. The SCC is using a special certificate to secure the connection to the SAP Cloud VM. You can update this certificate in the SCC admin UI as described here:
   Update the Certificate for a Subaccount | SAP Help Portal
3. Or the problem could also be the connection from the SCC to your backend system. Here there are two certificates involved, which are mutually validated:
   1. the SCC's "System Certificate", which the backend system validates as a client certificate
      (The expiration date of this certificate can be checked in the SCC admin UI under "Configuration --> ON-PREMISE --> System Certificate".)
   2. the backend system's server certificate, which the SCC validates during the handshake.
      (This certificate can be checked in the backend system, transaction STRUST --> SSL server Standard.)

You should also check the relevant log files (the logs of your webidetesting app, the SCC logs and the ICM trace on backend side) to find out, where exactly an expired certificate is involved here.