SSF_API_SIGNER_ERRORS

[Former Member]

Hi ,

I am getting the below error. Please suggest

==========================

N dy_signi_ext: SSO TICKET logon (client 110)

N mySAPUnwrapTicket: was called.

N HmskiFindTicketInCache: Trying to find logon ticket in ticket cache.

N HmskiFindTicketInCache: Try to find ticket with cache key: 110:FC8DDC4129B8560E0A3FD1703B9B768D .

N HmskiFindTicketInCache: Couldn't find ticket in ticket cache.

N mySAP: Got the following SSF Params:

N DN =CN=BODABAP

N EncrAlg =DES-CBC

N Format =PKCS7

N Toolkit =SAPSECULIB

N HashAlg =SHA1

N Profile =/usr/sap/BOD/DVEBMGS00/sec/SAPSYS.pse

N PAB =/usr/sap/BOD/DVEBMGS00/sec/SAPSYS.pse

N Got the codepage 4102.

N Got ticket (head) AjExMDAgAAxwb3J0YWw6RFNBSFWIABNiYXNpY2F1. Length = 460.

N *** ERROR => SsfVerify failed (see note 1055856). [ssoxxsgn.c 144]

N SsfVerify returned 5 :: SSF_API_SIGNER_ERRORS :: Error during verify - signer error.

N SSF LIB returned 26 :: SSF_API_NOCERTIFICATE :: Certificate not found.

N Signer ID: CN=NCD/No-1F:D4:A7:1E

N Signer info: SigningTime= Sat May 9 17:44:13 2009 (UTCTime: 090510004413Z)

N *** ERROR => ValidateTicket failed with rc = 5 and ssf_rc = 26. [ssoxxapi.c 226]

N *** ERROR => Ticket validation failed with rc = 5 and ssf_rc = 26. [ssoxxkrn.c 988]

N dy_signi_ext: invalid ticket

Thanks,

Vijay

[Former Member]

Hello Vijay,

When are you getting this error? Is this during accessing some URL from portal? If this is the case, then please check the thread

If this is not the case, then please give detail.

Regards

Gautam

[Former Member]

Hi ,

The issue has been resolved after changing the certificate.

Thanks,

Vijay

[Former Member]

>

> Hi ,
> 
> The issue has been resolved after changing the certificate.
> 
> Thanks,
> Vijay

Hi Vijay,

Just curious what you mean by u2018changingu2019.

Was the certificate expired or corrupt?

Thanks

PJ

[Former Member]

Did you just export a new certificate in portal then import it in STRUSTSSO2 ??

[Former Member]

Hi guys, I just had the same issue. Did you check if the certificate in STRUSTSSO2 has a checksum? Probably the checksum of the certificate is 0. This happens when you export the SAPLogonTicketKeypair as BASE64 and not as binary. Once I exported my own certificate as binary and imported the .crt file in STRUSTSS02, everything works again.

Best regards,

Anders