SAP Knowledge Base Article - Preview

2234709 - "Wrong or missing PIN for PSE" error when configuring SSL on SAP Web Dispatcher or Message Server

Symptom

After configuring SSL, to start the SAP Web Dispatcher or the Message Server of the ASCSxx/SCSxx instance.

However, it fails to start service in HTTPS port. The following error is observed in the trace ("dev_webdisp" for the SAP Web Dispatcher; "dev_ms" for the Message Server):

[Thr 6992] *** ERROR =>   secussl_Create_SSL_CTX():  PSE "<server PSE file>": unable to use! [ssslsecu.c   2399]
[Thr 6992] secussl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed  (1824/0x00000720)
[Thr 6992]    => "Wrong or missing PIN for PSE."
[Thr 6992] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
[Thr 6992] 0x00000720 | SAPCRYPTOLIB | SSL_CTX_set_default_pse_by_name
[Thr 6992] SAPCRYPTO API error
[Thr 6992] Wrong or missing PIN for PSE.
[Thr 6992] 0xa1d5012c | TOKEN_TOKPSE | sec_SSL_CTX_set_asc
[Thr 6992] Wrong PIN
[Thr 6992] << ---------- End of Secu-SSL Errorstack ----------
[Thr 6992] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "<server PSE file>" [ssslxxi.c    2805]
[Thr 6992] *** ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 6992] =================================================
[Thr 6992] 
[Thr 6992] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR
[Thr 6992] *** ERROR => IcmServInitSSL: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv.c   497]
[Thr 6992] *** WARNING => IcmAddService: Could not start service (rc=-14)


Read more...

Environment

  • Client/Server Technology - SAP Web Dispatcher (WDP)
  • Client/Server Technology - Message Server
  • SAP NetWeaver based product
  • ABAP Platform based product

Product

ABAP platform all versions ; SAP NetWeaver all versions

Keywords

SAPWebDispatcher, Webdispatcher, HTTPS, secure, failover, checkconfig, wdisp, dev_webdisp, webdisp, Wrong PIN for PSE, Cannot open PSE , KBA , BC-CST-WDP , Web Dispatcher , BC-CST , Client/Server Technology , BC-SEC-SSL , Secure Sockets Layer Protocol , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.