SAP Knowledge Base Article - Preview

3139487 - Error while enabling SSL in ASE with SSL LDAP - SAP ASE

Symptom

  • A valid ASE certificate has been generated following all the steps in KBA 1899365 - How to setup self-signed test SSL with ASE and SDK 
  • SSL LDAP is enabled on the ASE server.
  • sp_ssladmin addcert, '/myASE/ASE-16_0/certificates/ASEname.crt','password' -- generates the errors:
    • At command line:
      Msg 12823, Level 16, State 1
      Server 'server', Procedure 'sp_ssladmin', Line 158
      Command 'addcert' failed to add certificate path /myASE/ASE-16_0/certificates/ASEname.crt, system error: Other certificate failure.

    • When adding the tracing from KBA 2743343 - How to setup ssl and password encryption tracing 16.0 SP03 and higher
      server.log:
      kernel  enp_sslVerifyIdentity: sec_keyConverter_importKey() returned error A2700200
      kernel  Common Crypto Library SSL symbols loaded.
      kernel  enp_sslVerifyIdentity: sec_keyConverter_importKey() returned error A2700200
      kernel  enp_sslVerifyIdentity: sec_keyConverter_exportToMemoryPSE() returned error 0XA2700204

      Information in the secout/sec-dataserver-xxx.trc file:

      [keyConvert  ][202880] keyConverter: adding chain certificate from plain blob
      [keyConvert  ][202880] keyConverter: adding key from encrypted blob (index 0)
      [keyConvert  ][202880] keyConverter: added 2 trusted certificates (6196 bytes provided)
      [IO          ][202880] memory file '#_MemPSE_#255265777085508500000001': trying to register...
      memory file '#_MemPSE_#255265777085508500000001': wrote 0 bytes
      ERROR(0xA1E00218) in PSE module. Function sec_pse_create_certificate_chain failed: Missing certificate during building certificate chain
      ERROR(0xA2700203) in KEYCONVERT module. Function sec_keyConverter_export failed: Certificate chain is incomplete
      ERROR(0xA2700203) in KEYCONVERT module. Function sec_keyConverter_exportToMemoryPSE failed: Certificate chain is incomplete


Read more...

Environment

  • SAP Adaptive Server Enterprise 16.0
  • SDK for SAP Adaptive Server Enterprise 16.0

Product

SAP Adaptive Server Enterprise 16.0 ; SAP Adaptive Server Enterprise SDK 16.0

Keywords

KBA , BC-SYB-SDK , SDK , BC-SYB-ASE , Sybase ASE Database Platform (non Business Suite) , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.