3763571 - HADR setuphadr fails with "process is running but unable to log in" during RS initialization when SSL is enabled - SAP RS

• Running setuphadr with enable_ssl=true fails at task "Replication Server Initialization" (task 5 of 19). The Replication Server starts successfully but rs_init cannot log in to it.

The setuphadr output shows:

Configuring remote replication server.....................................Fail

ConfigureRemoteRSInstance  Task State       Error
ConfigureRemoteRSInstance  Long Description Executing the rs_init utility
ConfigureRemoteRSInstance  Failing Command  [.../rs_init.sh, -c, utf8, -r, .../tmp_res.rs, ...]
The rs_initLog shows:

waiting for server '***' to boot...
WARNING: Cannot determine the status of server '***':
         process is running but unable to log in.
Replication Server '***' is not running. Please
start the Replication Server and retry the configuration.
Task failed: start the Replication Server. Terminating configuration.
Configuration failed.

• RS log shows repserver is started and running.
  I. Replication Server 'POT_REP_SiteX' is started.
  I. Use SSL service is set to 'on'.
  
  
• rs_init cannot complete the SSL handshake to connect to it.
• If sectrace is collected is collected, the RS-side trace shows:

ERROR(0xA1E00218) in PSE_ module. Function sec_pse_create_certificate_chain failed:    Missing certificate during building certificate chain
ERROR(0xA2700203) in KEYCONVERT_ module. Function sec_keyConverter_export failed:    Certificate chain is incomplete
ERROR(0xA2700203) in KEYCONVERT_ module. Function sec_keyConverter_exportToMemoryPSE failed:    Certificate chain is incomplete

• SAP ASE HADR (Business Suite installation)

SSL, conection , KBA , BC-SYB-REP-SAP , Replication with SAP Suite / SAP BW , Problem