Symptom
After kernel update (e.g. 753:1200 or Kernel 7.53 patchno > 1200), message server failed to start with yellow status "Running but not responding", SAP start service is constantly staying in Starting state.
The following traces can be seen:
sapstartsrv.log
----
... ...
[Thr <thread ID>] CCL[SSL]: Ctx-00000002: Creating SSL_CTX with default cipher suites HIGH:PFS [sec_SSL_API_new_SSL_CTX_ext]
[Thr <thread ID>] CCL[SSL]: Ctx-00000002: Creating SSL_CTX with default preferred elliptic curves list EC_HIGH:EC_MEDIUM [sec_SSL_API_new_SSL_CTX_ext]
[Thr <thread ID>] = secussl_Create_SSL_CTX(): PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLC.pse" not found,
[Thr <thread ID>] = using PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLS.pse" as fallback
(the end)
dev_ms.old:
----
... ...
[Thr <thread ID>] MsHttpsInit: SapSSLCreateCredHdl(server-default) ok
[Thr <thread ID>] = secussl_Create_SSL_CTX(): PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLC.pse" not found,
[Thr <thread ID>] = using PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLS.pse" as fallback
[Thr <thread ID>] <timestamp>
[Thr <thread ID>] MsSGetModTime: stat failed for #_MemPSE_#XXXXXXXXXXXXXXXXXXXXXX (No such file or directory)
[Thr <thread ID>] <timestamp>
[Thr <thread ID>] MsSGetModTime: stat failed for #_MemPSE_#XXXXXXXXXXXXXXXXXXXXXX (No such file or directory)
(the end)
Results of "sapstack <pid of MS or sapstartsrv>"
----
... ...
sapcrypto!ssl_create_cipher_suites_TLS13+0x4e1
sapcrypto!ssl_create_cipher_suites+0xc1
sapcrypto!TLS_CONFIG_set_cipher_suites+0x1b4
sapcrypto!sec_SSL_CTX_set_default_cipher_suites+0xa3
sapcrypto!IMPL_SSL_CTX_set_default_cipher_suites+0x88
sapcrypto!Trace_SSL_CTX_set_default_cipher_suites+0x2f
... ...
Read more...
Environment
- NetWeaver or S/4 HANA based system on Windows Server OS
- All Kernels Codeslines & Kernel patches that include CommonCryptoLib versions between 8.5.48 and 8.5.52 are similarily susceptible to this problem
Product
Keywords
windows, sapstartsrv, starting, hang, freeze, deadlock, sapstartsrv.exe , KBA , BC-CST-MS , Message Service , BC-OP-NT , Windows , BC-CST-STS , Startup Service , BC-SEC-SSL , Secure Sockets Layer Protocol , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.