SAP Knowledge Base Article - Preview

3619165 - Critical name constraint error issued by CommonCryptolib Library

Symptom

  • SAP CommonCryptolib library issues a critical name constraint message in the system
  • HTTPS connections can fail with error SSSLERR_PEER_CERT_UNTRUSTED with information 'unsupported critical extension'
  • Additional error will be seen in the ICM trace -> ERROR: Unsupported Critical Certificate extension found: NameConstraints
  • SNC communication can fail with message 'A2210223 Server does not trust my certificate path'


Read more...

Environment

CommonCryptoLib
S/4 Hana 
SAP Netweaver 

Product

ABAP platform all versions ; SAP NetWeaver all versions

Keywords

critical name constraint error, unsupported critical extension, SSSLERR_PEER_CERT_UNTRUSTED, certificate error, CommonCryptoLib, sap patching, SSL connection, profile parameter, transaction RZ10, trace configuration , KBA , BC-SEC-CRYPTOLIB , CommonCryptoLib , BC-CST-IC , Internet Communication Manager , BC-SEC-SSL , Secure Sockets Layer Protocol , BC-SEC-SSL-CFG , SSL/TLS Configuration for ABAP , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.