PGP Decryption Error: File is no valid PGP Message, could not apply decryption.

[arkesh_sharma]

Hi Experts,

I have received both public and private keys from business and they are of type RSA-4096 with .ASC extension. The keys are generated by the business using a tool called GPG Keychain on a Mac machine. The keys are deployed on the server in the standard path - /usr/sap/<System ID>/<Instance ID>/sec

When I use them to encrypt the file, the encryption works fine but when I use the keys to decrypt the files, it fails in PI with the error:

com.sap.aii.af.lib.mp.module.ModuleException: File is no valid PGP Message, could not apply decryption.

The decryption is working fine in the tool but it is not working fine in SAP PI. Even a simple encrypted txt file (of extension .pgp) is failing with the above error. The configuration of the module is shown below in the snapshot:

Regards,

Arkesh

[arkesh_sharma]

Hi Manoj,

You're absolutely right in saying that I have one encryption scenario and one decryption scenario. I use Public Key for Encryption and Private Key for Decryption. The third-party sending the encrypted files have only Public Key with them. When they receive the files, it is going to be decrypted by PI so they do not need the private key.

The business person today directly provided one sample encrypted file from the tool GPG Keychain and gave it for decryption. He was able to decrypt it with the tool but that didn't work in SAP PI.

Here is a small snapshot of the key as you asked. I hope this will be helpful.

Regards,

Arkesh

[manoj_khavatkopp]

Take the encrypted file from the third party use the online tool IGolder and try to decrypt it using the private key which you have mentioned in channel and let us know the results.

[arkesh_sharma]

Hi Manoj,

Thank you for your response. The IGolder tool asks to copy-paste the content of the encrypted file. Some of the characters in the file could not properly get pasted in the web page so it did not decrypt the content of the file properly and gave an error. Hence, I used the USB Stick version of PortablePGP tool and tried to test the keys.

The keys (both public and private) are working fine in the tool. Hence, my next question is -

Is RSA4096 algorithm an acceptable form for PGP decryption in SAP PI?

Regards,

Arkesh

[manoj_khavatkopp]

Arkesh,

Arkesh ,

Really cant comment on that because even SAP help dont talk about RSA Alog.

PGP

 Some of the characters in the file could not properly get pasted in the web page

What type of characters , when a data is encrypted there shouldn't be any weird characters .Can you ask your third party to send and Armored PGP encrypted file and then you try to decrypt that.

Br,

Manoj

[arkesh_sharma]

Hi Manoj,

Please find the snapshots below from the PGP File opened in notepad and when it was pasted in the web page of IGolder.

PGP File:

IGolder:

I had a set of 6 files from the sender system which were encrypted. I tried decrypting them using Portable PGP, it worked in the tool but it didn't work in the SAP PI System.

Also, the strange thing is that the public key is working in SAP PI, which is in the same Algo format, but the decryption key is not working and it throws an error.

Regards,

Arkesh

[manoj_khavatkopp]

Hi Arkesh ,

As told earlier the file is encrypted without armoring hence you are getting these type of characters ..in gnupg tool i remember there is option to enable Armor ask you third party to send and Armored PGP file.

Try this workaround to confirm this is an Armoring issue :

Take the Public key which third party is using and encrypt some data using iGolder (iGolder encrypts a file always with armoring) and then try to decrypt it using PI

Br,

Manoj

[apu_das2]

I think yo need not to mention the Root path if you are using the default /sec path. Please remove root path entry and try once.

Thanks,

Apu

[arkesh_sharma]

Hi Apu,

I have removed the root path as it is the default path where keys are stored. I am still getting the same error.

Regards,

Arkesh