SAP Knowledge Base Article - Preview

3489744 - SAP AS JAVA Keystore grayed out after SPS upgrade

Symptom

In NWA Java keystores are greyed out and the server cannot load KeyStore entries correctly.

In Troubleshooting wizard :


Exception : Unable to construct entry from the given byte[]:
 iaik.asn1.DerCoder$2: ASN.1 creation error: iaik.asn1.CodingException: Number of parsed octets differs from length encoding!
at iaik.asn1.DerCoder.a(Unknown Source)
at iaik.asn1.DerCoder.decode(Unknown Source)
at iaik.asn1.DerCoder.decode(Unknown Source)
at com.sap.engine.services.keystore.impl.KeyStoreEntry.createEntry(KeyStoreEntry.java:148)
at com.sap.engine.services.keystore.impl.storage.EntriesStorage.readEntry(EntriesStorage.java:210)
at com.sap.engine.services.keystore.impl.storage.EntriesStorage._readEntry(EntriesStorage.java:333)
at com.sap.engine.services.keystore.impl.storage.EntriesStorage.callRelevantMethod(EntriesStorage.java:272)
at com.sap.engine.services.keystore.impl.storage.EntriesStorage.execSynchronizedRead(EntriesStorage.java:255)
at com.sap.engine.services.keystore.impl.storage.EntriesStorage.readEntry(EntriesStorage.java:119)
at com.sap.engine.services.keystore.impl.StorageManager.read(StorageManager.java:348)
at com.sap.engine.services.keystore.impl.StorageManager.readEntry(StorageManager.java:337)
...
at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:328)
Caused by: iaik.asn1.CodingException: Number of parsed octets differs from length encoding!
at iaik.asn1.ConstructedType.decode(Unknown Source)
... 41 more


(or) in Default traces :

#Error#com.sap.engine.services.keystore#
com.sap.ASJ.key.sv0010#BC-JAS-SEC#keystore#C000AC148D4D002C0000000300003608#21944050000000001#com.sap.engine.services.keystore##DF2881672FA411EF841B0A1DFF651CEB#df2881672fa411ef841b0a1dff651ceb#0#Timeout Service Synchronous Queue Processor#Plain#
getSystemViewsExpirationStatus()
[EXCEPTION]
com.sap.engine.services.keystore.exceptions.BaseKeystoreException: StorageManager.readEntry(ICM_SSL_62700, ssl-credentials-cert)
    at com.sap.engine.services.keystore.impl.StorageManager.read(StorageManager.java:352)
    at com.sap.engine.services.keystore.impl.StorageManager.readEntry(StorageManager.java:337)
    at com.sap.engine.services.keystore.impl.EntriesReadCache.readAndCache(EntriesReadCache.java:295)
    at com.sap.engine.services.keystore.impl.EntriesReadCache.readEntry(EntriesReadCache.java:306)
    at com.sap.engine.services.keystore.impl.security.SecurityRestrictionsChecker.readEntry(SecurityRestrictionsChecker.java:513)
    
    Caused by: iaik.asn1.DerCoder$2: ASN.1 creation error: iaik.asn1.CodingException: Invalid ASN.1 object: Unknown tag class/value: 0/8
    at iaik.asn1.DerCoder.a(Unknown Source)
    at iaik.asn1.DerCoder.a(Unknown Source)
    at iaik.asn1.ConstructedType.a(Unknown Source)
    at iaik.asn1.ConstructedType.decode(Unknown Source)
    ... 262 more
Caused by: iaik.asn1.CodingException: Invalid ASN.1 object: Unknown tag class/value: 0/8
    ... 266 more

    at com.sap.engine.services.keystore.impl.KeyStoreEntry.createEntry(KeyStoreEntry.java:152)
    at com.sap.engine.services.keystore.impl.storage.EntriesStorage.readEntry(


Read more...

Environment

Netweaver AS JAVA 7.5

Product

SAP NetWeaver 7.5

Keywords

keystore entries greyed out,SPS upgrade , Configuration manager,.BaseKeystoreException: StorageManager.readEntry,number of parsed octets differs from length encoding, iaik.asn1.DerCoder. , KBA , BC-JAS-SEC , Security, User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.