import_own_cert: Installation of certificate failedt

[Former Member]

Hello all,

I has install SAP certificate failed, PLS see information

*************************************************************************************

erpqas:qasadm 26> saprouter -v

--------------------

SAProuter information

--------------------

kernel release                742

kernel make variant           742_REL

DBMS client library

compiled on                   HP-UX B.11.31 U ia64 [] for hpia64

compiled for                  64 BIT

compilation mode              Non-Unicode

*****************************************************************************************

erpqas:qasadm 71> sapgenpse import_own_cert -c srcert -p local.pse

  **********************************************************************

  **   sapgenpse WARNING:  Environment variable "USER" not defined!   **

  ** ---------------------------------------------------------------- **

  **  Please define the USER environment variable *AND* insert        **

  **  the definition into the startup script of your Unix shell,      **

  **  or you may get problems accessing credentials created           **

  **  through 'seclogin'!                                             **

  **                                                                  **

  **  Examples additions for your shell startup scripts:              **

  **                                                                  **

  **  (sh):  if [ "$USER" = "" ];then USER="`whoami`";export USER;fi  **

  ** (csh):  if ( $?USER == 0 ) setenv USER "`whoami`"                **

  **                                                                  **

  **  You appear to have a csh-style login shell                      **

  **********************************************************************

import_own_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (9/0x0009) af_verify_Certificates failed

ERROR in ssf_install_certs_into_pse: (9/0x0009) af_verify_Certificates failed

ERROR in af_verify_Certificates: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)?? Unidentified parameter:

ERROR in sec_verify_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)?? Unidentified parameter:

ERROR in sec_hash_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)?? Unidentified parameter:

ERROR in sec_verify_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)?? Unidentified parameter:

ERROR in sec_hash_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)?? Unidentified parameter:

****************************************************************************************************

Please help me for issue.

Regards,

Noppadon J.

Installation of certificate failed.txt.zip

[Isaías]

Hello,

Does your certificate file ("srcert") have the complete certification chain in it?

If not, you need to first import the certification chain (certificate of the root CA, and the certificate of any intermediate CA).

Then the import should work.

Regards,

Isaías

[Former Member]

Hi Isaias

I not sure this certificate file ("srcert") have the complete, But has message show begin and End certificate, As below .

Regards,

Noppadon J.

[Isaías]

Hello,

hmmm when double checking the error entries, now I saw:

ERROR in af_verify_Certificates: (1538/0x0602) Invalid algorithm

So, it should not be related to the certificate chain as I initially thought.

It seems that your saprouter is up-to-date (release 742). Have you updated the sapcryptolib as well?

Regards,

Isaías

[Former Member]

Thanks Isaías, For answer helped me.

I have  up-to-date (release 742). But have not update file sapcryptolib because wait approve file form SAP support.  

Regards,

Noppadon J.

[Isaías]

Hello Noppadon,

Sorry, your last update is not very clear to me.

Did you solve the issue?

Regards,

Isaías