Error in Bootstrap

[Former Member]

Hi,

I have J2EE add-in will install a own Abap stack on the NW04S.

Step "start Java Engine" error on the bootstrap DWEBMGS\work\....bootstrap.log.

Detail log ;

Exception occurred:

com.sap.engine.bootstrap.SynchronizationException: Database initialization failed! Check database properties!

com.sap.engine.frame.core.configuration.ConfigurationException: Error while connecting to DB.

Caused by: com.sap.sql.log.OpenSQLException: Error while accessing secure store: Encryption or decryption is not possible because the full version of the SAP Java Crypto Toolkit was not found (iaik_jce.jar is required, iaik_jce_export.jar is not sufficient) or the JCE Jurisdiction Policy Files don't allow the use of the "PbeWithSHAAnd3_KeyTripleDES_CBC" algorithm..

at com.sap.sql.log.Syslog.createAndLogOpenSQLException(Syslog.java:106)

Caused by: com.sap.security.core.server.secstorefs.NoEncryptionException: Encryption or decryption is not possible because the full version of the SAP Java Crypto Toolkit was not found (iaik_jce.jar is required, iaik_jce_export.jar is not sufficient) or the JCE Jurisdiction Policy Files don't allow the use of the "PbeWithSHAAnd3_KeyTripleDES_CBC" algorithm.

at com.sap.security.core.server.secstorefs.SecStoreFS.openExistingStore(SecStoreFS.java:1975)

at com.sap.sql.connect.OpenSQLConnectInfo.getStore(OpenSQLConnectInfo.java:802)

at com.sap.sql.connect.OpenSQLConnectInfo.lookup(OpenSQLConnectInfo.java:783)

at com.sap.sql.connect.OpenSQLDataSourceImpl.setDataSourceName(OpenSQLDataSourceImpl.java:209)

... 15 more

Caused by: javax.crypto.NoSuchPaddingException: Padding 'PKCS5Padding' not implemented.

[Feb 19, 2010 4:37:51 PM ] [Bootstrap module]> Problem occurred while performing synchronization.

I checked the database connection on SAPSR3DB ok,password correct.

I tried both SUN www and SAP Marketplace jce_policy-1_4_2.zip. but not working.

My system NW04S 70 kernel Oracle Win 2003 UT BI-Java.

I forgot where to look?

Best Regards

Edited by: Ocak Karadeniz on Feb 22, 2010 1:16 PM

[Former Member]

Thank you

[Former Member]

Hi Ocak,

Please check out OSS note [810159|https://service.sap.com/sap/support/notes/810159] and [1071472|https://service.sap.com/sap/support/notes/1071472]. Not quite sure, why you get the error, because the first note indicates that with 2004s this issue should no longer appear.

Anyhow, looks like the recipe is to ensure that you

<ol>

<li>Don't have any old cryptographic libraries: So it might be best to search for libraries iaik_jce.jar and iaik_javax_crypto.jar and delete them. Also, make sure that nowhere in the class path a reference to the export version of the cryptographic library (iaik_jce_export.jar) is found.</li>

<li>Download a new version of the cryptographic library from the service marketplace (<a href="https://websmp208.sap-ag.de/~form/handler?_APP=00200682500000000917&_EVENT=DISPLAY" target="_blank">Software Distribution Center - Downloads - SAP Cryptographic Software</a>) and install it</li>

<li>Make sure that you have the unlimited strength encryption policy files installed for your JDK</li>

<li>Check if the class path and path point to only one and the right JDK</li>

</ol>

Hope this helps, harald

[former_member214355]

Hello Ocak

There are 3 known reasons for that issue:

a) the full version of the SAP Java Crypto Toolkit was not

found: Check the tool's CLASSPATH - it must contain iaik_jce.jar

file. The file's default location is

/usr/sap/<SID>/<SNUM>/SYS/global/security/lib/tools(or the

default share

//sapmnt/<SID>/<SNUM>/SYS/global/security/lib/tools).If there is

no iaik_jce.jar file, but iaik_jce_export.jar file only, the full

version of the SAP Java Crypto Toolkit is missing

b) the Jurisdiction Policy files: by default JDK comes with the

limited version of these policy files, which does not allow the

usage of higher grade encryption algorithms. The required

unlimited version must be downloaded and installed manually.

c) the JDK itself: Having installed multiple JCE security providers

into the used JDK, or multiple different JDK versions included in

CLASSPATH, PATH or LIB_PATH environment variables can disrupt the

normal IAIK security provider classloading and/or jar file

verification.

Solution

a) See the online documentation how to download and install the

full version. If there are both iaik jce jar files, check that

iaik_jce_export.jar file is NOT included into the CLASSPATH.

b) See SAP Note No. 739043.

c) Use only one JDK version (or remove the other installed versions

from the used environment variables).

Please deployi SAP Java Crypto Toolkit

Thanks

Kenny