Symptom
- The parameter "system/secure_communication" is being set to ON.
- SAP is restarted to activate the change, but the system does not work correctly.
- The work process trace file has entries similar to the below:
M 0x00001021 | SAPCRYPTOLIB | SSL_CTX_set_default_pse_by_name
M SAPCRYPTO API error
M The PSE file does not exist.
M 0xa1d50108 | TOKEN_TOKPSE | SSL_CTX_set_default_pse_by_name
M Token application not existing
M Cannot open PSE
...
M *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create CLIENT Credential for
M <<- ERROR: SapSSLCreateCredHdl()==SSSLERR_PSE_ERROR
Or
Gateway trace file has entries similar to the below:
*** ERROR => secussl_Create_SSL_CTX(): PSE "#_MemPSE_#xxxxxxx": PSE does not exist or File not found! [ssslsecu.c xxxx]
*** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_NOT_EXISTING trying to create SERVER Credential
for "#_MemPSE_#xxxxxx" [ssslxxi.c xxxx]
*** ERROR => GwCreateServerCredHdl: SapSSLCreateCredHdl failed (SSSLERR_PSE_NOT_EXISTING) [gwxxssl.c ]
*** ERROR => GwInitService: GwCreateServerCredHdl failed [gwxxrd.c xxxx]
***LOG S10=> GwInitReader, GwInitServiceSSL () [gwxxrd.c xxxx]
Read more...
Environment
- SAP NetWeaver 7.4 or newer
- ABAP Platform
Product
Keywords
ssl/ssl_lib, sec/libsapsecu, ssf/ssfapi_lib, system/secure_communication, Secure Internal Server Communication, system PKI , KBA , BC-CST-STS , Startup Service , BC-CST , Client/Server Technology , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.