2490681 - AS Java hangs in "Starting framework" due to incorrect SSL configuration

As Java startup takes long time. In dev_server log file you can see that (in this case) startup took 50 minutes:

F [Thr 140202962179840] Tue Jun  6 12:02:08 2017
F  [Thr 140202962179840] *** LOG => State changed from 0 (Initial) to 1 (Waiting to start).
F  [Thr 140202962179840] *** LOG => State changed from 1 (Waiting to start) to 2 (Starting framework).

F [Thr 140202962179840] Tue Jun  6 12:52:11 2017
F  [Thr 140202962179840] *** LOG => State changed from 2 (Starting framework) to 10 (Starting apps).

F [Thr 140201370146560] Tue Jun  6 12:53:34 2017
F  [Thr 140201370146560] *** LOG => State changed from 10 (Starting apps) to 3 (Running).

You executed thread dumps according to SAP Note 1095473. Then you analyzed these thread dumps in Eclipse Memory Analyzer tool according to the following SAP document: Analyzing Thread Dumps.

There are 1 threads starting services
1 (from 1) threads are running - at java.math.BigInteger.addOne(). Caller - at iaik.pkcs.pkcs1.RSACipher.rawPublicRSA() Details
CSS component: BC-JAS-SEC for iaik.pkcs.pkcs1.RSACipher

The result of analyzation points to the below stack in dev/std_server log files:

J  "Service Runner [ssl]" #100 prio=5 os_prio=0 cpu=2971100.00 [reset 2970540.00] ms elapsed=3003.67 [reset 2985.61] s allocated=123391898520 B (114.92 GB) [reset 123300158552 B (114.83 GB)] defined_classes=295
J  io= file i/o: 673428/1783 B, net i/o: 3336894/673179 B, files opened:14, socks opened:0  [reset file i/o: 590065/1582 B, net i/o: 292305/18339 B, files opened:9, socks opened:0 ]
J  tid=0x00007f83544da000 nid=0x7ecc / 32460  pthread-id=140201869395712 runnable  [_thread_blocked (_call_back), stack(0x00007f834a7f4000,0x00007f834a9f5000)J 
J Tue Jun  6 12:52:11 2017
] [0x00007f834a9f2000] top_bci: 70
J     java.lang.Thread.State: RUNNABLE
J   at java.math.BigInteger.addOne([IIII)I(BigInteger.java:2971)
J   at java.math.BigInteger.montReduce([I[III)[I(BigInteger.java:2867)
J   at java.math.BigInteger.implMontgomerySquare([I[IIJ[I)[I(BigInteger.java:2613)
J   at java.math.BigInteger.montgomerySquare([I[IIJ[I)[I(BigInteger.java:2571)
J   at java.math.BigInteger.oddModPow(Ljava/math/BigInteger;Ljava/math/BigInteger;)Ljava/math/BigInteger;(BigInteger.java:2839)
J   at java.math.BigInteger.modPow(Ljava/math/BigInteger;Ljava/math/BigInteger;)Ljava/math/BigInteger;(BigInteger.java:2502)
J   at iaik.pkcs.pkcs1.RSACipher.rawPublicRSA(Ljava/math/BigInteger;Ljava/security/interfaces/RSAPublicKey;)Ljava/math/BigInteger;(Unknown Source)
J   at iaik.pkcs.pkcs1.RSACipher.rawCrypt([B)[B(Unknown Source)
J   at iaik.pkcs.pkcs1.RSACipher.b([B)[B(Unknown Source)
J   at iaik.pkcs.pkcs1.RSACipher.engineDoFinal([BII)[B(Unknown Source)
J   at iaik.security.rsa.RSA.doFinal([BII)[B(Unknown Source)
J   at iaik.security.rsa.b.a([B)[B(Unknown Source)
J   at iaik.security.rsa.RSASignature.engineVerify([B)Z(Unknown Source)
J   at java.security.Signature$Delegate.engineVerify([B)Z(Signature.java:1219)
J   at java.security.Signature.verify([B)Z(Signature.java:652)
J   at iaik.x509.X509Certificate.verify(Ljava/security/PublicKey;Ljava/lang/String;)V(Unknown Source)
J   at iaik.x509.X509Certificate.verify(Ljava/security/PublicKey;)V(Unknown Source)
J   at com.sap.engine.services.keystore.impl.coder.SecudeCoder.isTrustedBy(Liaik/x509/X509Certificate;Liaik/x509/X509Certificate;)Z(SecudeCoder.java:369)
J   at com.sap.engine.services.keystore.impl.coder.SecudeCoder.isPK_ROOT(Liaik/x509/X509Certificate;)Z(SecudeCoder.java:364)
J   at com.sap.engine.services.keystore.impl.coder.SecudeCoder.createSecudeObject(Liaik/security/rsa/RSAPrivateKey;[Liaik/x509/X509Certificate;[Liaik/x509/X509Certificate;)Lcom/sap/engine/services/keystore/impl/coder/SecudeObject;(SecudeCoder.java:180)
J   at com.sap.engine.services.keystore.impl.coder.SecudeCoder.createPSE(Ljava/lang/String;[[Ljava/lang/Object;)Ljava/lang/String;(SecudeCoder.java:80)
J   at com.sap.engine.services.keystore.impl.pse.PSEViewManager.exportPSEViewToFile(Ljava/lang/String;)V(PSEViewManager.java:241)
J   at com.sap.engine.services.ssl.keystore.KeyStoreConnector.preparePSE(Lcom/sap/engine/services/ssl/keystore/PSEDescriptor;)V(KeyStoreConnector.java:268)
J   at com.sap.engine.services.ssl.keystore.KeyStoreConnector.preparePSE()V(KeyStoreConnector.java:194)
J   at com.sap.engine.services.ssl.server.ClusterEventListenerImpl.<init>()V(ClusterEventListenerImpl.java:46)
J   at com.sap.engine.services.ssl.server.ClusterEventListenerImpl.start()V(ClusterEventListenerImpl.java:77)
J   - locked <0x00000006a19ab108> (a java.lang.Class for com.sap.engine.services.ssl.server.ClusterEventListenerImpl)
J   at com.sap.engine.services.ssl.keystore.KeyStoreConnector.start(Z)V(KeyStoreConnector.java:106)
J   - locked <0x00000006a1727690> (a java.lang.Class for com.sap.engine.services.ssl.keystore.KeyStoreConnector)
J   at com.sap.engine.services.ssl.server.ServerService.start(Lcom/sap/engine/frame/ApplicationServiceContext;)V(ServerService.java:104)
J   at com.sap.engine.core.service630.container.ServiceRunner.startFrame(Lcom/sap/engine/frame/ApplicationServiceFrame;)V(ServiceRunner.java:165)
J   at com.sap.engine.core.service630.container.ServiceRunner.startService(Z)V(ServiceRunner.java:118)
J   at com.sap.engine.core.service630.container.ServiceRunner.run()V(ServiceRunner.java:65)

SAP NetWeaver for AS Java 7.1X/7.2/7.3X/7.4/7.5 using SSL.

AS Java, AS Java startup, Startup, Startup hangs, Starting Framework, Thread dump, SSL, PSE, Keystore view, SSL port, PSE file not updated, Export the keystore view to PSE,  java.math.BigInteger.addOne, iaik.pkcs.pkcs1.RSACipher, upgrade, deployment, SSL, SSL configuration. slow startup, long startup, fails to start, failed to start , KBA , BC-JAS-SEC , Security, User Management , BC-JAS-COR , Enterprise Runtime, Core J2EE Framework , BC-JAS-SF , Startup Framework , Problem