Frequently Asked Question

Symptom

• You want to activate the N4V Webi extensions provided by Need4Viz to enhance the Webi capabilities but an error message is displayed when trying to validate the extension :

• In the stderr.log fil of the ~SAPBI\tomcat\logs folder, you can find the error :

javax.net.ssl|ALL|25|https-openssl-nio-443-exec-4|2026-07-16 13:05:10.012 CEST|SSLSessionImpl.java:1192|Invalidated session: Session(1784199909983|SSL_NULL_WITH_NULL_NULL)
javax.net.ssl|DEBUG|25|https-openssl-nio-443-exec-4|2026-07-16 13:05:10.012 CEST|SSLSocketImpl.java:1759|close the underlying socket
javax.net.ssl|DEBUG|25|https-openssl-nio-443-exec-4|2026-07-16 13:05:10.012 CEST|SSLSocketImpl.java:1785|close the SSL connection (passive)
javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:117)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:370)
at java.base/sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:293)
at java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:209)
at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172)
at java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1510)
at java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1425)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
at java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
at java.base/sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:589)
at java.base/sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:187)
at java.base/sun.net.www.protocol.https.HttpsURLConnectionImpl.connect(HttpsURLConnectionImpl.java:142)
at com.businessobjects.adv_ivcdzview.ExtensionHelper.sendRequest(Unknown Source)
at com.businessobjects.adv_ivcdzview.ExtensionHelper.loadExternalExtensionDeclarationForCheck(Unknown Source)
at org.apache.jsp.jsp.WebIntelligence_005fCustomization.checkExternalExtension_jsp._jspService(checkExternalExtension_jsp.java:203)

...

Reason and Prerequisites

Environment:

• SAP BusinessObjects 4.3, BI2025
• N4V 2024.1.0+

Resolution

The Tomcat is configured with HTTPS and a liste of sslEnabledProtocols and/or ciphers are explicitely defined (server.xml file in tomcat/conf foler) :

but those values don't match the autorized values defined in the SAP JVM settings of the java.security file (in SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\conf\security folder - BI2025).

For instance, in the java.security file, the TLSv1 and TLSv1.1 are disabled :

To be sure the values of protocols/ciphers math between Tomcat and the SAPJVM, you can configure the connector as follow (use only TLS1.2 & TLS1.3, do not specify any cipher, Tomcat will use the one autorized by the SAP JVM) :

Once the server.xml file is updated :

• Restart the Tomcat
• Declare the N4V extensions in the CMC
• Clean the cache of your browser
• Open Webi and display the N4V panels