Unable to activate Service HTTPS ?

[former_member210158]

Hi all,

We are installing SAP SM7.1.

Earlier: We had CRYPTOLIB and prepared SLD system created PSE also.

we also activate HTTPS.

Now, we upgraded CR content and setup data suppliers(Java) and found HTTPS is inactive.

while trying to activate the same i am getting this message.

"Operation failed (rc=1)"

I tried changing the port numbers also but the outcome is same.

Can anybody help us here.

Regards

[former_member210158 · Accepted solution]

Hi all,

I activated it myself...

I just used tcode SMICM --> GOTO -->TRACE File --> Display ALL

and corrected those errors.

Done.

[former_member204080]

Hi Satish,

Please check suggestions mentioned in below note especially updating the kernel .Its not same scneario which you are facing but might give some clue to your issue

2189669 - SUM error in step INPUT-OS-USER-PASSWORDS-sapcontrol finished with exit code :SapSSLInit f...

Copying the content of note for quick reference

Symptom

INPUT-OS-USER-PASSWORDS step got held up with error as below:

-------\sdt\log\SUM\INPUT-OS-USER-PASSWORDS_XX.LOG-----

[Info  ]: Command line: sapcontrol -nr <xx> -host <hostname> -user <sidadm> <SecureField> -prot NI_HTTPS -function GetInstanceProperties
[Info  ]: Standard out: /software/spupd/SUM/sdt/tmp/SAPCONTROL_GETINSTANCEPROPERTIES_X_XX.OUT
[Info  ]: Process ID XXX has been started.
[Info  ]: Waiting for process ID XXX , name sapcontrol to finish.
[Info  ]: Process ID XXX, name sapcontrol has been finished, exit code 1.

where,

SAPCONTROL_GETINSTANCEPROPERTIES_X_XX.OUT log shows info as:
___________
SapSSLInit failed
___________

Wherein, sapcontrol throws similar error for other webmethods such as GetProcessList,AccessCheck Stop using NI_HTTPS

Check further using debug option for sapcontrol as below

sapcontrol -nr <xx> -host <hostname> -user <sidadm> <SecureField> -prot NI_HTTPS -function GetInstanceProperties -debug

Scenario:1

================================================
= SSL Initialization platform tag=(linuxx86_64_gcc41)
= (720_REL,Sep 14 2013,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)
SapISSLComposeFilename(ssl_lib): using default "libsapcrypto.so"
*** ERROR => DlLoadLib()==DLENOACCESS - dlopen("libsapcrypto.so") FAILED "libsapcrypto.so: cannot open shared object file: No such file or directory" [dlux_mt.c 445]
*** ERROR => secudessl_LoadLibrary(): Unable to load "libsapcrypto.so" [ssslsecu_mt. 433]
*** ERROR => Loading of SSL library failed -- NO SSL available!
=================================================
ERROR: SapSSLInit(read_profile=0)==SSSLERR_LIB_NOT_FOUND
SapSSLInit failed

Scenario:2

[Thr 7076] >> ---------- Begin of Secude-SSL Errorstack ---------- >>
[Thr 7076] ERROR in SSL_CTX_set_default_pse_by_name: (18946/0x4a02) Ticket error : "Repeated license ticket validation failure"

[Thr 7076] << ---------- End of Secude-SSL Errorstack ----------
[Thr 7076] SapISSLDeleteCTX(): deleting SSL_CTX (cred "<NULL>",refcount=0)
[Thr 7076] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create ANONYMOUS-CLIENT Credential
        for "#_MemPSE_#6285FDFAC1309FCC00000001" [ssslxxi.c    2417]
[Thr 7076] DlUnloadLib successful FreeLibrary("sapcrypto.dll") hdl 0
[Thr 7076] *** ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 7076] =================================================
[Thr 7076]
[Thr 7076] <<- ERROR: SapSSLInit(read_profile=0)==SSSLERR_PSE_ERROR
SapSSLInit failed

Environment

-Update/Upgrade,SPS update scenarios with SUM where HTTPS communication has been configured.
-SUM Option "Authentication with user and password is not required" is not chosen during Specify OS credential step.

Reproducing the Issue

-Repeat the phase in SUM.

Cause

-SAPCRYPTOLIB files failed to load/initialize to enable SSL for HTTPS service

Resolution

1. Make sure the latest kernel patch from the Service Market Place is available in the system.
2. Update the SAPHOSTAGENT in all available instances to the latest SP or upgrade to latest release.Refer noted 1031096 - Installing Package SAPHOSTAGENT and 1907566 - Obtaining the Latest SAP Host Agent Documentation .
3. Make sure to follow below section mentioned in the SUM guide
   "Section - 4.3.8, Configuring SAP Host Agent Authentication and SSL Connection"

See Also

1439348  - Extended security settings for sapstartsrv
1642340  - Using SSL in sapcontrol

Regards,

Murali