SAP Knowledge Base Article - Preview

3408900 - SAP start service(sapstartsrv) / Message server are not starting after KERNEL(Kernel 7.53 patchno > 1200) update

Symptom

After kernel update (e.g. 753:1200 or Kernel 7.53 patchno > 1200), message server failed to start with yellow status "Running but not responding", SAP start service is constantly staying in Starting state.

The following traces can be seen:

sapstartsrv.log
----
... ...
[Thr <thread ID>] CCL[SSL]: Ctx-00000002: Creating SSL_CTX with default cipher suites HIGH:PFS [sec_SSL_API_new_SSL_CTX_ext]
[Thr <thread ID>] CCL[SSL]: Ctx-00000002: Creating SSL_CTX with default preferred elliptic curves list EC_HIGH:EC_MEDIUM [sec_SSL_API_new_SSL_CTX_ext]
[Thr <thread ID>] =  secussl_Create_SSL_CTX():  PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLC.pse" not found,
[Thr <thread ID>] =      using PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLS.pse" as fallback
(the end)

dev_ms.old:
----
... ...
[Thr <thread ID>] MsHttpsInit: SapSSLCreateCredHdl(server-default) ok
[Thr <thread ID>] =  secussl_Create_SSL_CTX():  PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLC.pse" not found,
[Thr <thread ID>] =      using PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLS.pse" as fallback
[Thr <thread ID>] <timestamp>
[Thr <thread ID>] MsSGetModTime: stat failed for #_MemPSE_#XXXXXXXXXXXXXXXXXXXXXX (No such file or directory)
[Thr <thread ID>] <timestamp>
[Thr <thread ID>] MsSGetModTime: stat failed for #_MemPSE_#XXXXXXXXXXXXXXXXXXXXXX (No such file or directory)
(the end)

Results of "sapstack <pid of MS or sapstartsrv>"
----
... ...
sapcrypto!ssl_create_cipher_suites_TLS13+0x4e1 
sapcrypto!ssl_create_cipher_suites+0xc1
sapcrypto!TLS_CONFIG_set_cipher_suites+0x1b4 
sapcrypto!sec_SSL_CTX_set_default_cipher_suites+0xa3 
sapcrypto!IMPL_SSL_CTX_set_default_cipher_suites+0x88 
sapcrypto!Trace_SSL_CTX_set_default_cipher_suites+0x2f 
... ...


Read more...

Environment

  • NetWeaver or S/4 HANA based system on Windows Server OS
  • All Kernels Codeslines & Kernel patches that include CommonCryptoLib versions between 8.5.48 and 8.5.52 are similarily susceptible to this problem

Product

SAP NetWeaver all versions

Keywords

windows, sapstartsrv, starting, hang, freeze, deadlock, sapstartsrv.exe , KBA , BC-CST-MS , Message Service , BC-OP-NT , Windows , BC-CST-STS , Startup Service , BC-SEC-SSL , Secure Sockets Layer Protocol , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.