Symptom
- The parameter "system/secure_communication" is being set to ON.
- SAP is restarted to activate the change, but the system does not work correctly.
- The work process trace file has entries similar to the below:
M 0x00001021 | SAPCRYPTOLIB | SSL_CTX_set_default_pse_by_name
M SAPCRYPTO API error
M The PSE file does not exist.
M 0xa1d50108 | TOKEN_TOKPSE | SSL_CTX_set_default_pse_by_name
M Token application not existing
M Cannot open PSE
...
M *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create CLIENT Credential for
M <<- ERROR: SapSSLCreateCredHdl()==SSSLERR_PSE_ERROR
Or
Gateway trace file has entries similar to the below:
*** ERROR => secussl_Create_SSL_CTX(): PSE "#_MemPSE_#xxxxxxx": PSE does not exist or File not found! [ssslsecu.c xxxx]
*** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_NOT_EXISTING trying to create SERVER Credential
for "#_MemPSE_#xxxxxx" [ssslxxi.c xxxx]
*** ERROR => GwCreateServerCredHdl: SapSSLCreateCredHdl failed (SSSLERR_PSE_NOT_EXISTING) [gwxxssl.c ]
*** ERROR => GwInitService: GwCreateServerCredHdl failed [gwxxrd.c xxxx]
***LOG S10=> GwInitReader, GwInitServiceSSL () [gwxxrd.c xxxx]
Read more...
Environment
- SAP NetWeaver 7.4 or newer
- ABAP Platform
Product
Keywords
ssl/ssl_lib, sec/libsapsecu, ssf/ssfapi_lib, system/secure_communication, Secure Internal Server Communication, system PKI , KBA , BC-CST-STS , Startup Service , BC-CST , Client/Server Technology , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview