SAP Knowledge Base Article - Preview

3139487 - error while enabling SSL in ASE with SSL LDAP - SAP ASE

Symptom

  • A valid ASE certificate has been generated following all the steps in KBA 1899365 - How to setup self-signed test SSL with ASE and SDK 
  • SSL LDAP is enabled on the ASE server.
  • sp_ssladmin addcert, '/myASE/ASE-16_0/certificates/ASEname.crt','password' -- generates the errors:
    • At command line:
      Msg 12823, Level 16, State 1
      Server 'server', Procedure 'sp_ssladmin', Line 158
      Command 'addcert' failed to add certificate path /myASE/ASE-16_0/certificates/ASEname.crt, system error: Other certificate failure.

    • When adding the tracing from KBA 2743343 - How to setup ssl and password encryption tracing 16.0 SP03 and higher
      server.log:
      kernel  enp_sslVerifyIdentity: sec_keyConverter_importKey() returned error A2700200
      kernel  Common Crypto Library SSL symbols loaded.
      kernel  enp_sslVerifyIdentity: sec_keyConverter_importKey() returned error A2700200
      kernel  enp_sslVerifyIdentity: sec_keyConverter_exportToMemoryPSE() returned error 0XA2700204

      Information in the secout/sec-dataserver-xxx.trc file:

      [keyConvert  ][202880] keyConverter: adding chain certificate from plain blob
      [keyConvert  ][202880] keyConverter: adding key from encrypted blob (index 0)
      [keyConvert  ][202880] keyConverter: added 2 trusted certificates (6196 bytes provided)
      [IO          ][202880] memory file '#_MemPSE_#255265777085508500000001': trying to register...
      memory file '#_MemPSE_#255265777085508500000001': wrote 0 bytes
      ERROR(0xA1E00218) in PSE module. Function sec_pse_create_certificate_chain failed: Missing certificate during building certificate chain
      ERROR(0xA2700203) in KEYCONVERT module. Function sec_keyConverter_export failed: Certificate chain is incomplete
      ERROR(0xA2700203) in KEYCONVERT module. Function sec_keyConverter_exportToMemoryPSE failed: Certificate chain is incomplete


Read more...

Environment

SDK for SAP Adaptive Server enterprise 16.0

Product

SAP Adaptive Server Enterprise 16.0 ; SAP Adaptive Server Enterprise SDK 16.0

Keywords

KBA , BC-SYB-SDK , SDK , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.