topic Re: SSL Strust : Issuer certificate missing in database in Application Development and Automation Discussions

SSL Strust : Issuer certificate missing in database

former_member568822 — Thu, 15 Oct 2009 10:06:10 GMT

Hi,

I am apply ssl in Abap stack STRUST. When i apply the certificate respond from the CA , it showing error

Issuer certificate missing in database:CN=DigiCert High Assurance CA-3, OU=www.digicert.c

Any idea??

Thanks

Re: SSL Strust : Issuer certificate missing in database

Former Member — Thu, 15 Oct 2009 10:10:31 GMT

Are you sure that you are importing the response into the correct PSE?

You must have selected the correct PSE on the left. The window at the bottom right is just a clipboard for copy & pasting so nothing will happen before importing into the the top right hand screen when the correct PSE is chosen.

Cheers,

Julius

Re: SSL Strust : Issuer certificate missing in database

former_member568822 — Thu, 15 Oct 2009 10:13:15 GMT

Hi ,

I am sure that i am apply to the correct PSE. I wonder is that SAP did not support DIGICERT.

Thanks.

Re: SSL Strust : Issuer certificate missing in database

Former Member — Thu, 15 Oct 2009 11:06:36 GMT

Please go through [SAP Note 510007|https://service.sap.com/sap/support/notes/510007] to check that you got the config correct and the ciphers used by DIGICERT are supported by SAP.

Cheers,

Julius

Re: SSL Strust : Issuer certificate missing in database

former_member568822 — Thu, 15 Oct 2009 11:31:26 GMT

Hi,

Thanks for reply. I am able to apply the respond for SAP test CA but after i replace the PSE and apply the DIGICERT, it show the error.

Thanks

Re: SSL Strust : Issuer certificate missing in database

former_member568822 — Fri, 16 Oct 2009 07:50:12 GMT

Solve after apply note 508307.

Re: SSL Strust : Issuer certificate missing in database

Former Member — Thu, 29 Sep 2011 02:20:15 GMT

Hi,

I am facing the same issue in our ECC system. As per the sap note 508307 all the parameters are correct & also SAPSECULIB & SAPCRYPTO are latest level bu t still getting the same error, Can someone help in resolving this issue.

Error is :- "Issuer certificate missing in database:CN=DigiCert High Assurance CA-3, OU=www.digicert.c "

Re: SSL Strust : Issuer certificate missing in database

Former Member — Thu, 29 Sep 2011 07:17:28 GMT

Hi,

Most probably, the signed certificate that you try to import in strust is miising the complete path with the certification authority.

The easiest way to get it right is to import the certificate as a p7b file.

Regards,

Olivier

Re: SSL Strust : Issuer certificate missing in database

Former Member — Sat, 22 Nov 2014 23:19:24 GMT

Back up the files sec.

Go to transaction code SE14,

"SSF_PSE_H" Delete the contents of the table. ** Do not delete the table. **

Create a new certificate request.

Re: SSL Strust : Issuer certificate missing in database

Harish_Kintali1 — Wed, 04 Mar 2015 06:12:15 GMT

In Strust, goto Certificate->Database, create a new "ROOT CA" entry ex;Z_NETCA.

Select any PSE(System PSE) ->Certificate->Import and Import the "Issuer Certificate".

Certificate->Export->Database>Select Z_NETCA, CA, Some description ->OK

Now you will be able to import your certificate response without any issues.

To Get the "Issuer Certificate" open your certificate response(certificate) , goto Certification Path TAB and select the next level higher to your Server CA and ->View Certificate->Goto Details tab and Copy to File->Export in base64 or DER format.

Re: SSL Strust : Issuer certificate missing in database

Former Member — Thu, 30 Apr 2015 17:15:27 GMT

Hi,

I had the same issue.

In my case the solution was to see all the certificate chain and install every certificate in the database.

I need to install one intermediate certificate as Server CA, the root CA and my signed certificate.

Thanks