It is not so rare to see customers facing the SSSLERR_SERVER_CERT_MISMATCH error in their Webdispatcher/ICM traces. Therefore, I'll clarify better regarding such error.The SSSLERR_SERVER_CERT_MISMATCH error means that the server is using a certificat...
It is not so rare to face the "Error while creating PSE" (TRUST040) when trying to create SNC SAPCryptolib PSE in SAP Netweaver AS ABAP environment. This might happen due to old corrections (check SAP Notes 1740744, 1756908 and 2198198). However, the...
The error message SSF_KRN_SIGN_BY_AS with return code 5 indicates a signer error, i.e., the system cannot find the correct certificate to sign or to verify the signer of some digital signature. Unfortunately, often the application running into this e...
If you're concerned about which version of SAPCRYPTOLIB you should refer to the WHICH.TXT (that located in the .SAR file) for more details on "Which SAPCRYPTOLIB do I need to install?". If there are several different variants of SAPCRYPTOLIB for diff...
In cases where Trusted RFCs are not working, the easiest solution is to delete the trusted relationship and re-build it. However, before doing that, please make sure that you have SAP Note 1491645 implemented in both systems of the trusting relations...
Hello Chris and Manohar,It is already possible to disable TLS1.0 (since a while). Please check the SAP Note 510007 (it was updated) which explains how to disable TLS1.0.Best Regards,Guilherme
Hello Parag, There is no parameter in the ICM layer that can bypass the mismatch issue. You can also refer to SAP Note 1318906 for further information on how to proceed then. Best Regards,Guilherme de Oliveira
Hello Cleiton,The issue is that your client is not sending a certificate to your server... as you have set icm/HTTPS/verify_client = 2, the server will only proceed if a client certificate is sent.Therefore, set icm/HTTPS/verify_client = 1 and see if...
Hello Andre,The output of commands seems correct. The "No readable SSO-Credential" warning appears because the command was executed with dg1adm user and your credential was created to SAPServiceDG1 user (which is the user starting your system, so it ...
Hello Andre,Could you kindly ensure that you've correctly created the credentials for SAPSNCSKERB.pse?sapgenpse seclogin -p <path>\SAPSNCSKERB.pse -x <PIN> -O <system_user>you can verify that with command:sapgenpse seclogin -l(if possible, please pla...
