SSL certificate

[Former Member]

Hi,

I'm trying to create the credentials file for a SSL certificate using command:

sapgenpse seclogin  -p C:\usr\sap\DIS\SYS\exe\nuc\NTAMD64\sapssl.cer   -x M3bhyu34 -O administrator

But it's giving me this error:

Does someone know what can be the issue?

Thanks a lot, Carolina

[yakcinar · Accepted solution]

Hello Carolina,

Send the error, please.

Details will be helpfull.

Regards,

Yuksel AKCINAR

[Former Member · Accepted solution]

Hi,

Sorry for the delay, I haven't been working. Image wasn't paste last time. This is the error:

Opening PSE ... ok.

Retrieving my name ... ok

Adding credentials ...

Flusinh ...

seclogin: Can't add credentials

Thanks a lot, Carolina

[isaias_freitas · Accepted solution]

Hello,

The "-p" argument should point to a PSE file (like "server.pse"), not to a certificate file (".cer").

Did you already create the PSE file?

If yes, replace the ".cer" by the ".pse" file at your command line.

If no, you need to create the PSE file first.

Regards,

Isaías

[Former Member · Accepted solution]

Hi,

Yes, PSE is already created and signed. After downloading a new sacrytolib that error dissapeared but we are having this new problem when we try to create the credentials:

As per my understanding only environment var SECUDIR and SNC_LIB are required , but could someone confirm why is addign a \SAPSSLS.pse to the path ?

Thanks a lot, Carolina

[isaias_freitas · Accepted solution]

Hello,

Try passing the complete path to the PSE file at the "-p" argument.

Regards,

Isaías

[cris_hansen · Accepted solution]

Hello Carolina,

The "seclogin" switch is used to add a credential in the list, i.e. specify an user ID that can open the PSE file.

If you have a PSE file and want to import the certificate response (taking for granted that you have a SSL signed certificate), then you can use:

sapgenpse import_own_cert -c <certfile> -p <psename> -r <intermediate> -r <root> -v

<certfile> is the file that holds the certificate response

<psename> is the PSE filename

<intermediate> and <root> are files that holds the certificates from the CA that signed the request.

You can always use sapgenpse -h for more details on the switches available, and sapgenpse <switch> -h for help message in a specific switch.

I hope this helps,

Cris

[Farid · Accepted solution]

Hello,

I had a similar error yesterday.

Don't know if it would work for you, I had the exact same error message, I finally found out that when running the seclogin command, the cred_v2 file could not be created under some Windows default directory cause this directory did not exist.

I created it manually :

C\:users\sidadm\Appdata\Local\sec

I reran the command and ....voila

[cris_hansen · Accepted solution]

Hi Raoul,

This happened because you don't have the SECUDIR environment variable set.

Just check:

set | findstr SECUDIR

You can set to the $DIR_INSTANCE\sec

the expected place for the PSE files.

Regards,

Cris

[Former Member · Accepted solution]

Hi,

Problem was with the sapcryptolib . After download the latest version available on the marketplace, now is working.

Thanks a lot for your help, Carolina