CAP local Deploy to HANA error: Connection failed (RTE:[300006] Cannot create certificate store

[WouterLemaire]

Hi all,

When I run the command "cds deploy --to hana" from vscode, I get the following error:

Connection failed (RTE:[300006] Cannot create certificate store 

I have installed SAP CommonCryptoLib as described in here:

https://cap.cloud.sap/docs/advanced/troubleshooting

and here: https://help.sap.com/viewer/e54136ab6a4a43e6a370265bf0a2d744/4.2.12/en-US/c049e28431ee4e8280cd6f5d1a...

Still the same result. But I was able to make it work by following this blog in combination of changing the setting as in my comment on this blog post:

https://blogs.sap.com/2020/03/31/hana-cli-xsa-mta-project-in-vs-code/?source=social-global-sap+devel...

Any idea why "cds deploy --to hana" does not work?

Thank you in advance!

[former_member643578 · Accepted solution]

Hello Vikas,

When i run cds deploy --to hana command i am also facing the same issue.

I was changed default-env.json as suggested by wouter and i run the following command

cds deploy --to hana --vcap-file ./default-env.json.

After this my application was sucessfully deployed to hana and you can go through cds deploy --help. you will find there.

[WouterLemaire · Accepted solution]

This works in combination with "validate_certificate":"false" in the VCAP config. Thank you for your help!

[VikasLamba]

Hi,

Even I am facing the same problem and I tried both the solutions suggested above.

What I am observed is that cds deploy command always reads the service keys from the CF HANA service instance and then overwrites the default-env.json file in the project as well as the gen folder and thus copying the key manually as suggested by Jhodel does not work and neither removing the certificate and setting these parameters ( “validate_certificate”:false, “encrypt”:true) as the file gets overwritten every time.

Any other suggestions?

Vikas

[CzynJay23]

I can concur with this, whatever we have defined in default-env.json will not be accounted for

[jhodel18]

Hi Wouter,

I probably came across with the same issue before, what I did back then is take the certificate directly from my HDI container service in SCP. Another option is generate a service key for the service and use the certificate from there to update your default-env.json file. It should work either way.

Thanks and regards,

Jhodel

[former_member643578]

Hi Jhodel,

Can you please explain with detailed information what you mentioned above ?

[gregorw]

Hi lellavasundhara,

when you adopt the steps described in Token-Based Authentication (JWT) to the HANA Service you should know what to fill into default-env.json.

Best regards
Gregor

[former_member643578]

Thank you for your quick response...