Symptom
After kernel update (e.g. 753:1200 or Kernel 7.53 patchno > 1200), message server failed to start with yellow status "Running but not responding", SAP start service is constantly staying in Starting state.
The following traces can be seen:
sapstartsrv.log
----
... ...
[Thr <thread ID>] CCL[SSL]: Ctx-00000002: Creating SSL_CTX with default cipher suites HIGH:PFS [sec_SSL_API_new_SSL_CTX_ext]
[Thr <thread ID>] CCL[SSL]: Ctx-00000002: Creating SSL_CTX with default preferred elliptic curves list EC_HIGH:EC_MEDIUM [sec_SSL_API_new_SSL_CTX_ext]
[Thr <thread ID>] = secussl_Create_SSL_CTX(): PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLC.pse" not found,
[Thr <thread ID>] = using PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLS.pse" as fallback
(the end)
dev_ms.old:
----
... ...
[Thr <thread ID>] MsHttpsInit: SapSSLCreateCredHdl(server-default) ok
[Thr <thread ID>] = secussl_Create_SSL_CTX(): PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLC.pse" not found,
[Thr <thread ID>] = using PSE "E:\usr\sap\<SID>\<instance>\sec\SAPSSLS.pse" as fallback
[Thr <thread ID>] <timestamp>
[Thr <thread ID>] MsSGetModTime: stat failed for #_MemPSE_#XXXXXXXXXXXXXXXXXXXXXX (No such file or directory)
[Thr <thread ID>] <timestamp>
[Thr <thread ID>] MsSGetModTime: stat failed for #_MemPSE_#XXXXXXXXXXXXXXXXXXXXXX (No such file or directory)
(the end)
Results of "sapstack <pid of MS or sapstartsrv>"
----
... ...
sapcrypto!ssl_create_cipher_suites_TLS13+0x4e1
sapcrypto!ssl_create_cipher_suites+0xc1
sapcrypto!TLS_CONFIG_set_cipher_suites+0x1b4
sapcrypto!sec_SSL_CTX_set_default_cipher_suites+0xa3
sapcrypto!IMPL_SSL_CTX_set_default_cipher_suites+0x88
sapcrypto!Trace_SSL_CTX_set_default_cipher_suites+0x2f
... ...
Read more...
Environment
- NetWeaver or S/4 HANA based system on Windows Server OS
- All Kernels Codeslines & Kernel patches that include CommonCryptoLib versions between 8.5.48 and 8.5.52 are similarily susceptible to this problem
Product
Keywords
windows, sapstartsrv, starting, hang, freeze, deadlock, sapstartsrv.exe , KBA , BC-CST-MS , Message Service , BC-OP-NT , Windows , BC-CST-STS , Startup Service , BC-SEC-SSL , Secure Sockets Layer Protocol , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview