10-15-2009 11:06 AM
Hi,
I am apply ssl in Abap stack STRUST. When i apply the certificate respond from the CA , it showing error
Issuer certificate missing in database:CN=DigiCert High Assurance CA-3, OU=www.digicert.c
Any idea??
Thanks
10-15-2009 11:10 AM
Are you sure that you are importing the response into the correct PSE?
You must have selected the correct PSE on the left. The window at the bottom right is just a clipboard for copy & pasting so nothing will happen before importing into the the top right hand screen when the correct PSE is chosen.
Cheers,
Julius
10-15-2009 11:13 AM
Hi ,
I am sure that i am apply to the correct PSE. I wonder is that SAP did not support DIGICERT.
Thanks.
10-15-2009 12:06 PM
Please go through [SAP Note 510007|https://service.sap.com/sap/support/notes/510007] to check that you got the config correct and the ciphers used by DIGICERT are supported by SAP.
Cheers,
Julius
10-15-2009 12:31 PM
Hi,
Thanks for reply. I am able to apply the respond for SAP test CA but after i replace the PSE and apply the DIGICERT, it show the error.
Thanks
10-16-2009 8:50 AM
09-29-2011 3:20 AM
Hi,
I am facing the same issue in our ECC system. As per the sap note 508307 all the parameters are correct & also SAPSECULIB & SAPCRYPTO are latest level bu t still getting the same error, Can someone help in resolving this issue.
Error is :- "Issuer certificate missing in database:CN=DigiCert High Assurance CA-3, OU=www.digicert.c "
09-29-2011 8:17 AM
Hi,
Most probably, the signed certificate that you try to import in strust is miising the complete path with the certification authority.
The easiest way to get it right is to import the certificate as a p7b file.
Regards,
Olivier
11-22-2014 11:19 PM
Back up the files sec.
Go to transaction code SE14,
"SSF_PSE_H" Delete the contents of the table. ** Do not delete the table. **
Create a new certificate request.
03-04-2015 6:12 AM
In Strust, goto Certificate->Database, create a new "ROOT CA" entry ex;Z_NETCA.
Select any PSE(System PSE) ->Certificate->Import and Import the "Issuer Certificate".
Certificate->Export->Database>Select Z_NETCA, CA, Some description ->OK
Now you will be able to import your certificate response without any issues.
To Get the "Issuer Certificate" open your certificate response(certificate) , goto Certification Path TAB and select the next level higher to your Server CA and ->View Certificate->Goto Details tab and Copy to File->Export in base64 or DER format.
04-30-2015 6:15 PM
Hi,
I had the same issue.
In my case the solution was to see all the certificate chain and install every certificate in the database.
I need to install one intermediate certificate as Server CA, the root CA and my signed certificate.
Thanks