Network input/output exception has occurred: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints...

[Former Member]

Hi all,

I am trying to update patch to solution manager. While opening the SUM tool after starting of sum getting error.

system : windows server 2012 r2 std

Database: sybase ase 15.7

Provide the solution for this issue.

I checked the error likecertificates does not conform to algorithm constraints.

Thanks in advance

Rajeshkumar

Message was edited by: Jason Lax

[Former Member]

Hi Rajeshkumar V, I resolved the issue finally for SUM SP14 using a workaround: change the config below in both JREs D:\usr\sap\\SUM\jvm\jre\lib\security\java.security D:\usr\sap\\SUM\jvm6\jre\lib\security\java.security original keys a. jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024 jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768 change to a. jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024 jdk.tls.disabledAlgorithms=SSLv3, RC4, DH keySize < 768 I think its only needed in JVM6 which is used by DSUGUI but i did it in both. Works fine for me in same system constellation. best regards Heiko

[Former Member]

HI Heiko,

Could you please let me know which file you change this parameter?

I got same error but not sure which file I should change the key you mention.

BR

Terence

[Former Member]

Hi Terence,

in folder:

D:\usr\sap\SUM\jvm\jre\lib\security\

file: java.security

in folder:

D:\usr\sap\SUM\jvm6\jre\lib\security\

file: java.security

there are two encryption algorithm config values:

jdk.certpath.disabledAlgorithms=MD2, MD5, RSA keySize < 1024

and:

jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 768

change these two values to:

jdk.certpath.disabledAlgorithms=MD2, RSA keySize < 1024

and:

jdk.tls.disabledAlgorithms=SSLv3, RC4, DH keySize < 768

The problem is that DSUGUI is using JRE6 and they needs MD5 to connect to SLtools (?) but sap or any other has disabled in runtime config files.

in short you have to remove the MD5 related values in the above mentioned config values. I can confirm after that the patch process has finished successful.

regards

Heiko

[yasin_kurtulus]

This solution worked for me.

Thanks Heiko.

[Former Member]

Solution worked for my also

Thanks a lot Heiko

[former_member454405]

Thanks a lot it resolved my issue too.... (Y)

Regards,

Naveen Kumar

[JasonLax]

I shortened the title because the field was maxed out: when the title is overused (abused), other members cannot post replies.

cc:

[Former Member]

Hi Jason,

thx for help!

Best Regards

Heiko