How To Fix WSS035 - Not supported algorithm suite in service WSDL

SAP Error Message - Details

• Message type: E = Error

• Message class: WSS - Web Services Security

• Message number: 035

• Message text: Not supported algorithm suite in service WSDL

What causes this issue?

The used algorithm suite is not supported by ABAP client.

System Response

The client can not generated with the given WSDL.

How to fix this error?

Please check which algorithm suite is supported in the system.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message WSS035 - Not supported algorithm suite in service WSDL ?

  SAP Error Message:
  
  WSS035 Not supported algorithm suite in service WSDL
  
  Cause
  This error occurs when the SAP Web Service runtime encounters a WS-Security policy in the service's WSDL that specifies an algorithm suite (a set of cryptographic algorithms) which is not supported or recognized by the SAP system.
  Specifically:
  
  The WSDL or its associated WS-Policy defines a security policy with an algorithm suite (e.g., Basic256, Basic128, TripleDes, etc.) that SAP's Web Service stack does not support.
  The SAP Web Service runtime validates the WS-Security policy and fails if the algorithm suite is unknown or incompatible.
  This often happens when the WSDL is generated or provided by a non-SAP system using newer or custom security policies or algorithms not implemented in SAP's Web Service runtime.
  
  
  Explanation
  
  Algorithm Suite: Defines the cryptographic algorithms used for message encryption, signature, and digest.
  SAP supports a limited set of algorithm suites as per its Web Service Security implementation.
  If the WSDL references an algorithm suite outside this supported set, the runtime throws WSS035.
  
  
  Solution
  
  
  Check the WSDL's WS-Security Policy  
  
  Open the WSDL and locate the WS-Policy section.
  Identify the <sp:AlgorithmSuite> element and note the algorithm suite specified.
  
  
  
  Use Supported Algorithm Suites  
  
  Modify the WSDL or the service provider's security policy to use an algorithm suite supported by SAP.
  Common supported algorithm suites in SAP include:
  
  Basic256
  Basic128
  TripleDes
  
  
  Avoid custom or newer algorithm suites not recognized by SAP.
  
  
  
  Regenerate or Adjust the WSDL  
  
  If you control the service provider, regenerate the WSDL with a supported algorithm suite.
  If consuming a third-party service, request a WSDL with a compatible security policy.
  
  
  
  SAP Notes and Patches  
  
  Check SAP Notes for updates or patches that might add support for newer algorithm suites.
  Sometimes, applying the latest Support Package Stack (SPS) or patches for the SAP Web Service runtime can add support for additional algorithms.
  
  
  
  Alternative: Disable WS-Security Temporarily  
  
  For testing, you can disable WS-Security to confirm the cause.
  Not recommended for production due to security risks.
  
  
  
  
  Related Information
  
  SAP Help Portal: Documentation on WS-Security and supported algorithm suites in SAP NetWeaver.
  SAP Notes: Search for notes related to WSS035 or WS-Security algorithm support.
  SAP Community: Discussions on WS-Security compatibility issues.
  WS-Security Standards: Understanding the standard algorithm suites and their identifiers.
  
  
  Summary
  
  
  
  Aspect
  Details
  
  
  
  
  Error
  WSS035 Not supported algorithm suite in service WSDL
  
  
  Cause
  WSDL references an unsupported WS-Security algorithm suite
  
  
  Solution
  Use a supported algorithm suite in the WSDL's WS-Policy; update SAP system if needed
  
  
  SAP Support
  Check SAP Notes and apply patches for extended algorithm support
  
  
  Workaround
  Disable WS-Security temporarily (not recommended for production)
  
  
  
  
  If you provide the WSDL snippet or the exact algorithm suite mentioned, I can help identify if it is supported or suggest the closest supported alternative.