SAP Knowledge Base Article - Preview

2713718 - Public key fingerprint : java.lang.NullPointerException - SSO Certificate - Wrong format


After a system copy or new installation of NetWeaver Java, where Sybase Database is being used and the ASE JDBC driver version is 16.0 SP03 PL05, the following error can be seen in NWA > Configuration > Certificates & Keys > TicketKeystore view for SAPLogonTicketKeypair and SAPLogonTicketKeypair-cert

Public key fingerprint : java.lang.NullPointerException: while trying to invoke the method iaik.asn1.ASN1Object.getComponentAt(int) of a null object returned from



It can be seen that keysize and public key fingerprint are both null:


Deleting the keypair and recreating them ends with the same error. Also deleting the keystore view and restarting the server has the same affect. The newly created keypair certs have the same errors.

Additionally there is an issue with the SSO wizard, http://<host>:<port>/sso2, there is error:

Wrong certificate format. Certificate cannot be decoded


The default trace may contain errors like these:

Certificate under alias [SAPLogonTicketKeypair] cannot be retrieved from keystore view [TicketKeystore]. Authentication stack: [*webdynpro_resources_sap.com_tc~lm~itsam~ui~mainframe~wd].#

Authentication stack: [*webdynpro_resources_sap.com_tc~lm~itsam~ui~mainframe~wd].
java.lang.Exception: Cannot read certificate from keystore.



SAP NetWeaver 7.3
SAP enhancement package 1 for SAP NetWeaver 7.3
SAP NetWeaver 7.4
SAP NetWeaver 7.5


SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP enhancement package 1 for SAP NetWeaver 7.3


KBA , BC-JAS-SEC , Security, User Management , BC-DB-SYB , Business Suite on Adaptive Server Enterprise , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.