SAP router not starting after replacing PSE certificate

[mohitsahu]

Hello All,

I have implemented PSE certificate and now when i try to start the router it is throwing error:

[saprouter@hbg-saprouter saprouter]$ cat  dev_rout

---------------------------------------------------

trc file: "dev_rout", trc level: 1, release: "720"

---------------------------------------------------

Wed Oct  1 16:26:05 2014

SAP Network Interface Router, Version 40.4

command line arg 0:     saprouter

command line arg 1:     -r

command line arg 2:     -S

command line arg 3:     3299

command line arg 4:     -K

command line arg 5:     p:CN=saprouter1, OU=00007941, OU=SAProuter, O=SAP, C=DE

SncInit(): Initializing Secure Network Communication (SNC)

      AMD/Intel x86_64 with Linux (st,ascii,SAP_UC/size_t/void* = 8/64/64)

      UserId="saprouter" (511), envvar USER="saprouter"

SncInit(): Trying environment variable SNC_LIB as a

      gssapi library name: "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so".

  File "/usr/sap/saprouter/linux-x86_64-glibc2.3/libsapcrypto.so" dynamically loaded as GSS-API v2 library.

  SECUDIR="/usr/sap/saprouter" (from $SECUDIR)

  The internal Adapter for the loaded GSS-API mechanism identifies as:

  Internal SNC-Adapter (Rev 1.0) to SAPCRYPTOLIB

  Product Version = SAPCRYPTOLIB  5.5.5C pl36  (Jul  3 2013) MT,AESNI,NB

main: pid = 6966, ppid = 6756, port = 3299, parent port = 0 (0 = parent is not a saprouter)

reading routtab: './saprouttab'

Can someone help?

Regards,

Mohit

[former_member182657 · Accepted solution]

Hi,

Could you please share complete dev_rout log file and share the exact error which you are facing.

Regards,

Gaurav

[mohitsahu · Accepted solution]

Hello Gaurav,

The log that i shared are from dev_rout.

and when i run

[saprouter@hbg-saprouter]$ saprouter -r -S 3299 -K "p:CN=saprouter1, OU=0000237941, OU=SAProuter, O=SAP, C=DE"

trcfile  dev_rout

no logging active

WARNING: wildcard character used in route target

Regards,

Mohit

[former_member182657 · Accepted solution]

Hi Mohit,

If you are talking about

WARNING: wildcard character used in route target

Then it's not an error or any type of issues,now you need to test the router connection by providing router string to connect the systems via sap router.

Hope this will help you.

Regards,

Gaurav

[mohitsahu · Accepted solution]

Hello Gaurav,

As I said the SAP router is not starting and giving error described in above logs.

Sm59 saposs rfc are not connecting and failing connection test.

Regards,

Mohit

[former_member182657 · Accepted solution]

Hi Mohit,

If failing SAPOSS connection then share the error log for that and if possible share the snapshot for OSS1 as well.

Regards,

Gaurav

[Reagan · Accepted solution]

There is no error.

Start the saprouter in the background

nohup ./saprouter -r -K "p:CN=saprouter1, OU=0000027937, OU=SAProuter, O=SAP, C=DE" &

replace saprouter1 with the hostname of the saprouter

[mohitsahu · Accepted solution]

Hello Reagan,

I run this command and it worked. Can you please explain why it did not work when i run this

saprouter -r -S 3299 -K "p:"CN=saprouter1, OU=0000237941, OU=SAProuter, O=SAP, C=DE"

Regards,

Mohit

[Reagan · Accepted solution]

Hello Mohit

The one I suggested you is the one I am aware of. I have never see or started with the -S 3299 option. Here is what SAP says.

Configuring SNC: SAProuter ( SAProuter - Network and Transport Layer Security - SAP Library

Regards

RB

[former_member185239]

Hi Mohit,

There is no error seems to be recorded in your router.

If you have generate the pse , then you need to reconfigure your saprouter.

Before that you need to check the SAPOSS connection after starting saprouter.

With Regards

Ashutosh

[former_member182657]

Hi Mohit,

Additionally i would recommend you to visit SAP doc at  SAP Library - SAProuter

Regards,

Gaurav