Initialization of SSL library failed-NO SSL available!

[Former Member]

Hi Experts,

When i am activating https port : 443 in my FIORI ABAP Front end server and received the attached error.

I checked that environment variable is fine and cryptography file was installed on server.

Any idea on this?

Regards,

Karthik.M

[cris_hansen · Accepted solution]

Hello Karthik,

As Isaias mentioned, the user ID used to start the system (TBG\SAPServiceFDV) needs to have access to the SECUDIR directory.

I also recommend to update the CommonCryptoLib - as you are using version 8.4.32. There are recent developments and bug fixes. You can update to version 8.4.49, from April of 2016.

You also need to check whether you have the server PSE (SAPSSLS.pse file). It will allow your system to act as a server - and it is required for the HTTPS service to come up.

Regards,

Cris

[Former Member · Accepted solution]

Hello,

SAPSERVICE<sid> User id having the full administrator access and its in administrator group only.

Common cryprolib file i will download and update, same version 8.4.32 is in another QA system and here https port is activated and working fine.

My server having SAPSSLS.pse file but i am unable to use file SAPSSLC.pse  error i am getting now, Refer the attached screenshot.

Could you help me resolve this error.

Regards

Karthik.M

[cris_hansen · Accepted solution]

Hi Karthik,

The user ID does not have the necessary authorization to read the file.

You case use sapgenpse to add credentials to TBG\SAPServiceFDV:

a) Open a command prompt with the user ID in question;

b) Issue commands:

        set SECUDIR=E:\user\sap\FDV\DVEBMGS00\sec

        sapgenpse seclogin -p SAPSSLC.pse

As a result, you should have an output like:

"...

running seclogin with USER="TBG\SAPServiceFDV"

Added SSO-credentials for PSE "E:\user\sap\FDV\DVEBMGS00\sec\SAPSSLC.pse"

..."

Regards,

Cris

[Former Member · Accepted solution]

Hello Crisis,

I have received the output like this.

Regards

Karthik.M

[cris_hansen · Accepted solution]

Hello Karthik,

You forgot to set the SECUDIR environment variable first. Thus sapgenpse tries to open the PSE file under the %APPDATA%\sec directory.

Please execute:

          set SECUDIR=E:\user\sap\FDV\DVEBMGS00\sec

          sapgenpse seclogin -p SAPSSLC.pse

In the same command prompt, one after another, then check the results.

Regards,

Cris

[Former Member · Accepted solution]

Thanks Cris,

Already i have setup the environment variable, but still issue is persist.

FDVADM having full authorization(Administrator group added)

Regards

Karthik.M

[cris_hansen · Accepted solution]

Hi Karthik,

Ah! Now I realize that you are using Powershell!

Then the commands are:

          $env:SECUDIR = "E:\user\sap\FDV\DVEBMGS00\sec"

          sapgenpse seclogin -p SAPSSLC.pse

If you want to list the environment variables via Powershell, then use:

          Get-ChildItem Env:

or, to have only the SECUDIR:

          Get-ChildItem Env:*SECUDIR*

I hope this works,

Cris

[Former Member · Accepted solution]

Hi Cris,

I tried that option and its showing the result as below

Regards

Karthik.M

[cris_hansen · Accepted solution]

Hello Karthik,

Could you run

dir

inside the "sec" directory?

Do you have the file SAPSSLC.pse there?

What happens if you try to use the following command (after setting SECUDIR):

sapgenpse get_my_name -p SAPSSLC.pse

?

About the environment variable command, you missed a ":" after Env, i.e. you should use "Env:".

Regards,

Cris

[Former Member · Accepted solution]

Hi Cris,

I have executed the command in that sec directory and file is available in the same path.

[cris_hansen · Accepted solution]

Hi Karthik,

I made a typo and I'm sorry for that. Please use these commands:

          $env:SECUDIR = "E:\usr\sap\FDV\DVEBMGS00\sec"

          sapgenpse seclogin -p SAPSSLC.pse

Thank you,

Cris

[Former Member · Accepted solution]

i am receive the same error

PS E:\usr\sap\fdv\DVEBMGS00\sec> $env:SECUDIR = "E:\usr\sap\FDV\DVEBMGS00\sec"

PS E:\usr\sap\fdv\DVEBMGS00\sec> sapgenpse seclogin -p SAPSSLC.pse

running seclogin with USER="FDVADM"

seclogin: Couldn't open PSE "E:\usr\sap\FDV\DVEBMGS00\sec\SAPSSLC.pse" (Cannot open file)

[cris_hansen · Accepted solution]

Hello Karthik,

It is telling that the file could not be opened.

What happens if you try to open another PSE?

sapgenpse get_my_name -p SAPSSLA.pse

Can you see something?

If the issue persists, then I would rename SAPSSLC.pse to SAPSSLC.pse.old and create a new client PSE:

sapgenpse gen_pse -p SAPSSLC.pse

Regards,

Cris

[Former Member · Accepted solution]

Hi Chris,

How to create a new PSE file, can you explained about?

Regards,

Karthik

[cris_hansen · Accepted solution]

Hi Karthik,

You can use:

          sapgenpse gen_pse -p SAPSSLC.pse

You will need to provide a PIN and the DN for the PSE.

Regards,

Cris

[Former Member · Accepted solution]

Hi Cris,

The SAPSSLC. Pse file permission removed and re provided.

Issue has been fixed, Thanks for support.

Regards

Karthik

[isaias_freitas]

Hello,

Confirm that the path and PSE filename are correct.

And since this is a Windows server, ensure that the "SAPServiceSID" user has full access to the file.

Regards,

Isaías