SSL Server Standard and SSL Client Standard PSE's missing.

[Former Member]

Hi,

Title: SSL Server Standard and SSL Client Standard PSE's missing.

iam about to configure strustsso2. But i cant find the above PSE's in this transaction. When i checked Transaction SMICM - Trace file - Display, i found the following errors:

=================================================

= SSL Initialization    platform tag=(rs6000_5.2_64)

=   (720_REL,Aug  6 2011,mt,ascii,SAP_UC/size_t/void* = 8/64/64)

  profile param "ssl/ssl_lib" = "/usr/sap/EBQ/DVEBMGS01/exe/libsapcrypto.o"

           resulting Filename = "/usr/sap/EBQ/DVEBMGS01/exe/libsapcrypto.o"

=   found SAPCRYPTOLIB  5.5.5C pl21  (May  7 2007) MT-safe

=   current UserID: "ebqadm",  env-var USER="ebqadm"

=   found SECUDIR environment variable

=   using SECUDIR=/usr/sap/EBQ/DVEBMGS01/sec

=  secudessl_Create_SSL_CTX():  PSE "/usr/sap/EBQ/DVEBMGS01/sec/SAPSSLC.pse" not found,

=      using PSE "/usr/sap/EBQ/DVEBMGS01/sec/SAPSSLS.pse" as fallback

=  secudessl_Create_SSL_CTX():  PSE "/usr/sap/EBQ/DVEBMGS01/sec/SAPSSLA.pse" not found,

=      using PSE "/usr/sap/EBQ/DVEBMGS01/sec/SAPSSLS.pse" as fallback

******** Warning ********

*** No SSL-client PSE "SAPSSLC.pse" available

***    this will probably limit SSL-client side connectivity

********

= Success    SapCryptoLib SSL ready!

=================================================

So, where can i get or how can i generate these 2 files - SAPSSLC.pse , SAPSSLA.pse ??

Regards,

Mohan.

[Former Member]

Hello Krishna,

I know this is an old thread.

I fixed it after a struggle so I am updating what I did,

If you get PSE file not found error in ICM, the make sure u activate the required PSE's in the Trust Manager (STRUST).

This will ensure the files SAPSSLA.pse and SAPSSLS.pse etc are fetched correctly as maintained in the SECUDIR environment variable.

[guilherme_deoliveira]

Hello Mohan,

The SAP Note 510007 points 3 and 4 explains detailed how you can create these two PSEs. But noticed that the SAPSSLA.pse is not the SSL server Standard, but the SSL Client (Anonymous).

Best Regards,

Guilherme de Oliveira.

[Former Member]

Hi Guilherme,

i have already seen this standard Note. The point 3 says - Choose "Create" in the context menu of the "SSL server" node.........but under this transaction STRUST, i cannot see the Node SSL server. I have checked other system and there i can see many nodes but in the required system, i can see only 2 nodes - System PSE, File. The other nodes have disappeared, very strange. How to get these folders back, any idea?

Regards,

Mohan.

[guilherme_deoliveira]

Hello Mohan,

Probably you cannot see many nodes because your sapcryptolib was not configured correctly (the SAP Note 510007 that you've checked, points 1 and 2 details that). You can check that by running the sapgenpse command and checking the results. Once the sapcryptolib is correctly installed, the SSL node should appear.

Regards,

Guilherme.

[former_member191562]

Hello Krishna,

I know this is an old thread.

I fixed it after a struggle so I am updating what I did,

If you get PSE file not found error in ICM, the make sure u activate the required PSE's in the Trust Manager (STRUST).

This will ensure the files SAPSSLA.pse and SAPSSLS.pse etc are fetched correctly as maintained in the SECUDIR environment variable.

[Former Member]

Thanks for telling us how you fix it ..  so many people  ask and ask  but never let us know what  happened to fix the issue resulting in many useless thread ..

[charles_koekemoer2]

Hello,

I am facing the same problem and there is no error on the ICM and the HTTPS port does starts on ICM as per below log and still the missing SSL serever standard, SSL client SSL client, etc