SAP Netweaver installation issue - Primary Application Server

[HemantVaswani]

I need to setup a fresh SAP S4 HANNA 2022 distributed system which comprises 3 servers HANA DB, ASCS and PAS.

Of three above,

the S4 HANA DB is up and running. Instance 02

ASCS is installed on instance 00. ABAP message port 3600 and internal port 3900

While installing the PAS server, I select the instance 01, message port 3601 and internal port 3901. However the PAS server installation is not getting completed. It is held up at 70%

I am using swpm tool for above installations

The pas server installation is stuck up at step where it is not able to test the start and stop the 01 instance.

My findings are

From PAS to ASCS , port 3600 is working ok

3601 and 3901 are saying connection refused

For above reasons, the disp+work service in sapcontrol command output shows YELLOW continuously

I have been trying to resolve the port issue for past several days with none useful result

Attached installation logs of SWPM for referencesapinst-dev-log.txtsapinst-log.txt

[Sandra_Rossi]

Could you post the logs please?

[HemantVaswani]

Hi , Kindly refer the screenshot of log of dev_w12 and dev_disp, i wish if it helps

[leelaseshukumar]

Hi HemantVaswani,

[leelaseshukumar]

Hi HemantVaswani, In my case also same issue , PAS : 2024 S4hana server : Linux SLES 15 SP5 os

[HemantVaswani]

Kindly refer the attached screenshot of the error faced in SWPM console

[Sandra_Rossi]

Please either edit your question (Actions > Edit)

or use the COMMENT button for comments, asking for complements, adding details, replying to a comment or a proposed solution or to the OP question, etc., ANSWER is only to propose a solution, dixit SAP text at the right of the answer area.

[Sandra_Rossi]

The screenshot doesn't help.

What helps is this file:

[HemantVaswani]

could you suggest which file to refer from the path mentioned in the above shared error screenshot. there several number of files present here

[Sandra_Rossi]

Only those just written during installation. I guess you know how to do it.

[HemantVaswani]

Yes, i found the following in the latest log of dev_webdisp

[Thr 140291608672000] <<- ERROR: SapSSLSessionStartNB(sssl_hdl=7f981c007870)==SSSLERR_ALERT_CERTIFICATE_UNKNOWN

[Thr 140291608672000] *** ERROR => IcmConnInitServerSSL: SapSSLSessionStartNB returned (-127): SSSLERR_ALERT_CERTIFICATE_UNKNOWN [icxxconn.c 2020]

[Thr 140291607086848] SSL_get_state()==0x11c0 "TLS read finished A"

[Thr 140291607086848] *** ERROR in secussl_read: SSL_read() lasterr 0x20001046

[Thr 140291607086848] => "received a fatal TLS certificate unknown alert message from the peer"

[Thr 140291607086848] srv SSL session PSE "/root/.sapinst/sappas/sec/SAPSSLS.pse" (load=Sun Jan 7 14:28:24 2024, rcnt=1)

[Thr 140291607086848] Subject : CN=abcdef.ec2.internal

[Thr 140291607086848] Issuer : CN=abcdef.ec2.internal

[Thr 140291607086848] SerialNo: 0A:20:23:12:28:10:49:11

[Thr 140291607086848] Validity - NotBefore: Thu Dec 28 10:49:11 2023 (231228104911Z)

[Thr 140291607086848] NotAfter: Fri Jan 1 00:00:01 2038 (380101000001Z)

[Thr 140291607086848] SSL_CTX ciphersuites=545:PFS:HIGH::EC_P256:EC_HIGH

[Thr 140291607086848] Server SSL_CTX 7f9830320c00 pvflags=513 (TLSv1.2,BC)

[Thr 140291607086848] TLSextSNI server_name="abcdef.ec2.internal"

[Thr 140291607086848] secussl_read: SSL_read() failed (536875078/0x20001046)

[Thr 140291607086848] => "received a fatal TLS certificate unknown alert message from the peer"

[Thr 140291607086848] SSL NI-hdl 82: local=abcdef:4237 peer=rdphost:50680

[manojsomkuwar]

Please share *sapinst* files.

Also, you can do ls -ltr to view the latest modified files in descending order instead of plain ls command.

Regards,

Manoj Somkuwar

[HemantVaswani]

Hi , I have attached the required logs, can you please check now and suggest

sapinst-dev-log.txtsapinst-log.txt

[Sandra_Rossi]

Better post them in the question (Actions > Edit), nobody else will see them.

[S_Sriram]

Hi Hemant

Could you share the log file /tmp/sapinst_instdir/s4hana2022/core/hdn/install/distributed/abap/app1

Regards

SS

[HemantVaswani]

sandra.rossi can you elaborate the steps to do this or share some link

[HemantVaswani]

s.sriram I have shared above

[S_Sriram]

Hi

Where is the log file attached? you have shared screenshot.

Regards

SS

[Sandra_Rossi]

hemantvaswani Could you pleaes attach the logs in the question (Actions > Edit), see how people don't find the log, which should have posted in your question, not lost in a comment, and repeated for each people asking.

Thank you.

[HemantVaswani]

Ok, I have updated the logs in the Question. Thanks

[Sandra_Rossi]

hemantvaswani Nice, thank you! 🙂