SAP Knowledge Base Article - Preview

3261400 - Simple Diagnostics Agent cannot read PSE file after SSL configuration - SAP Focused Run

Symptom

After enabling SSL for Simple Diagnostics Agent, the agent status in Agent Administration is red.

In the agent.log file. the following exception is found:

ERROR [CF Push[PFR] 3] com.sap.solman.agent.core.scheduler.ScheduledExecutorServiceWithTimeout com.sap.solman.agent.ccdb.cf.job.ConsumerPushJob@6214a81d failed. Task will be unscheduled.
java.lang.NoClassDefFoundError: com/sap/solman/agent/core/cert/impl/KeyManager : cannot initialize class because prior initialization attempt failed
 at com.sap.solman.agent.core.cert.impl.KeyManagerFactoryImp.getKeyManager(KeyManagerFactoryImp.java:21)
 at com.sap.solman.agent.core.cert.KeyManagerFactory.keyManager(KeyManagerFactory.java:53)
 at com.sap.solman.agent.core.cert.KeyManagerFactory.keyManager(KeyManagerFactory.java:77)
 [...]
Caused by: java.lang.ExceptionInInitializerError: java.lang.ExceptionInInitializerError
 at com.sap.solman.agent.core.cert.impl.KeyManagerFactoryImp.getKeyManager(KeyManagerFactoryImp.java:21)
 at com.sap.solman.agent.core.cert.KeyManagerFactory.keyManager(KeyManagerFactory.java:53)
 at com.sap.solman.agent.core.cert.KeyManagerFactory.keyManager(KeyManagerFactory.java:77)
 [...]
caused by: com.sap.solman.agent.core.error.SystemException: cannot read global key store
 at com.sap.solman.agent.core.cert.impl.KeyManager.initGlobal(KeyManager.java:310)
 at com.sap.solman.agent.core.cert.impl.KeyManager.<clinit>(KeyManager.java:284)
 at com.sap.solman.agent.core.cert.impl.KeyManagerFactoryImp.getKeyManager(KeyManagerFactoryImp.java:21)
[...]
caused by: com.sap.solman.agent.core.cert.CertificateException: /usr/sap/hostctrl/exe/sec/SAPSSLS.pse
 at com.sap.solman.agent.core.cert.impl.CertificateStore.openKeyStoreFile(CertificateStore.java:274)
 at com.sap.solman.agent.core.cert.impl.CertificateStore.readFile(CertificateStore.java:108)
 at com.sap.solman.agent.core.cert.impl.CertificateStore.readServerKeyStore(CertificateStore.java:92)
 [...]
caused by: java.io.IOException: Error parsing pse file
 at com.sap.commoncryptolib.provider.KeyStorePSE.engineLoad(Unknown Source)
 at java.security.KeyStore.load(KeyStore.java:1445)
 at com.sap.solman.agent.core.cert.impl.CertificateStore.openKeyStoreFile(CertificateStore.java:270)
 at com.sap.solman.agent.core.cert.impl.CertificateStore.readFile(CertificateStore.java:108)
 at com.sap.solman.agent.core.cert.impl.CertificateStore.readServerKeyStore(CertificateStore.java:92)
[...]
caused by: java.security.KeyStoreException: Error [0xa1500200]: Wrong password
 at com.sap.commoncryptolib.provider.CCLKeyStorePSE.jniNewWithPSE(Native Method)
 at com.sap.commoncryptolib.provider.CCLKeyStorePSE.create(Unknown Source)
 at com.sap.commoncryptolib.provider.KeyStorePSE.engineLoad(Unknown Source)
 at java.security.KeyStore.load(KeyStore.java:1445)
 [...]


Read more...

Environment

  • SAP Focused Run
  • Simple Diagnostics Agent 1.0 >= SP 44 (1.44)
  • SAP Host Agent 7.21 >= PL45
  • SAPJVM > 8.1.51

Product

SAP Focused Run 3.0 ; SAP Focused Run 4.0

Keywords

KBA , SV-FRN-INF-SDA , Simple Diagnostic Agent (SDA) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.