3043557 - Unable to activate HTTPS port due to missing or inaccessible PSE file

HTTPS port could not be activated in SMICM.

In dev_icm trace, you can see error like below, which indicates the ABAP server PSE (SAPSSLS.pse) is missing.

*** ERROR => secudessl_Create_SSL_CTX(): PSE "/usr/sap/<SID>/<Instance name>/sec/SAPSSLS.pse": File not found!
secussl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed
secude_error 4129 (0x00001021) = "The PSE file does not exist."
... ...
*** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
for "/usr/sap/<SID>/<Instance name>/sec/SAPSSLS.pse"
*** ERROR => Initialization of SSL library failed NO SSL available!

The issue can also occur if the ABAP client PSE (SAPSSLC.pse) is missing.

*** ERROR =>   secussl_Create_SSL_CTX():  PSE "/usr/sap/<SID>/<Instance name>/sec/SAPSSLC.pse": unable to use! [ssslsecu_mt. 2795]
... ...
Cannot open PSE (PSE=/usr/sap/<SID>/<Instance name>/sec/SAPSSLC.pse, SECUDIR=/usr/sap/<SID>/<Instance name>/sec, user=SIDadm)
... ...
*** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create CLIENT Credential
for "/usr/sap/<SID>/<Instance name>/sec/SAPSSLC.pse" [ssslxxi_mt.c 3417]
*** ERROR => Initialization of SSL library failed -- NO SSL available!

• SAP NetWeaver based product
• ABAP Platform based product

HTTPS port, activate, SMICM, SSSLERR_PSE_ERROR , KBA , BC-CST-IC , Internet Communication Manager , BC-CST , Client/Server Technology , BC-SEC-SSL , Secure Sockets Layer Protocol , Problem