SSL - HTTPS error

[Former Member]

Hi All,

I am trying to start the HTTPS service. I added to the instance profile the following parameters:

icm/server_port_2 PROT=HTTPS,PORT=443,EXTBIND

when I try to start this port I receive the following message:

[Thr 1240591280] =================================================

[Thr 1240591280] = SSL Initialization

[Thr 1240591280] *** ERROR => DlLoadLib: dlopen()= /usr/sap/WAS/SYS/exe/run/libsapcrypto.so: cannot open shared object file: No such file or directory -> DLENOACCESS (0,Success) [dlux_mt.c 310]

[Thr 1240591280] *** ERROR => secudessl_LoadLibrary(): Unable to load "/usr/sap/WAS/SYS/exe/run/libsapcrypto.so" [ssslsecu_mt. 347]

[Thr 1240591280] *** ERROR => Loading of SSL library failed -- NO SSL available!

[Thr 1240591280] =================================================

I installed the libsapcrypto.so in both directories:

/usr/sap/WAS/DVEBMGS01/sec

/usr/sap/WAS/SYS/exe/run

I could not setup the variavle SNC_LIB. I tried to put in wasadm profile but it does not appear when I check with echo $SNC_LIB.

It is quite urgent !! who can help me ?

Thanks a lot

Celio Almeida

[former_member185954 · Accepted solution]

Hi Celio,

Which operating system are you using for your server ?

it mostly looks like a permission issue , your libcrypto.so file should reside in the directory /usr/sap/WAS/SYS/exe/run , should be owned by wasadm:sapsys userid and should have 'rwx' for the owner.

Regards,

Siddhesh

[Former Member · Accepted solution]

Hi Siddhesh,

I already changed the permission to chmod 777 and the owner is wasadm:sapsys

-rwxrwxrwx 1 wasadm sapsys 2315366 2007-12-13 15:13 libsapcrypto.so

Not working until now !

Other clue ?

Tkx a lot for your quick response.:-)

Celio Almeida

[former_member185954 · Accepted solution]

Hi Celio,

You haven't answered my question yet:

What is your Operating System?

Regards,

Siddhesh

[Former Member · Accepted solution]

Sorry.... my SO is Linux SUSE 9

Tkx

Celio

[former_member185954 · Accepted solution]

Hi Celio,

Have you setup the other profile parameters for the Trust Manager ?

&#9679; ssl/ssl_lib = $(DIR_EXECUTABLE)/<sec library> (for example, libsapcrypto.so)

&#9679; sec/libsapsecu = $(DIR_EXECUTABLE)/<sec library>

&#9679; ssf/ssfapi_lib = $(DIR_EXECUTABLE)/<sec library>

&#9679; ssf/name = SAPSECULIB

[Setting the Profile Parameters for Using SSL|http://help.sap.com/saphelp_nw70/helpdata/en/85/46453c3ff4110ee10000000a11405a/frameset.htm]

Regards,

Siddhesh

[former_member185954 · Accepted solution]

Also,

On your Linux box, login as wasadm user and try to switch to that kernel run directory and see if it allows you to access your libsapcrypto.so

That should resolve any directory permission issues if any.. ( its a wild thing.. i don't think it should be an issue though, but still no harm in checking..)

Regards,

Siddhesh

[Former Member · Accepted solution]

Hi Siddhesh,

Below the parameters that I setup. Could you double check if there is no parameter missing ?

icm/HTTPS/verify_client 1

ssl/ssl_lib /usr/sap/WAS/SYS/exe/run/libsapcrypto.so

sapgui/user_scripting TRUE

icm/server_port_2 PROT=HTTPS, PORT=1443, TIMEOUT=900

ssf/ssfapi_lib /usr/sap/WAS/SYS/exe/run/libsapcrypto.so

sec/libsapsecu /usr/sap/WAS/SYS/exe/run/libsapcrypto.so

ssf/name SAPSECULIB

login/accept_sso2_ticket 1

SAPSYSTEMNAME WAS

INSTANCE_NAME DVEBMGS01

SAPSYSTEM 01

rdisp/wp_no_dia 2

rdisp/wp_no_btc 2

rdisp/wp_no_vb 1

rdisp/wp_no_vb2 1

rdisp/wp_no_enq 1

rdisp/wp_no_spo 1

DIR_TRANS /usr/sap/trans

icm/server_port_0 PROT=HTTP,PORT=8001

DIR_ORAHOME /oracle/WAS/920_32

ipc/shm_psize_10 58000000

ipc/shm_psize_40 62000000

exe/j2ee $(DIR_INSTANCE)/j2ee/os_libs/jcontrol

rdisp/j2ee_start_control 1

rdisp/j2ee_start 1

rdisp/j2ee_timeout 600

rdisp/frfc_fallback on

icm/HTTP/j2ee_0 PREFIX=/,HOST=localhost,CONN=0-500,PORT=50100

jstartup/trimming_properties off

jstartup/protocol on

exe/jlaunch $(DIR_INSTANCE)/j2ee/os_libs/jlaunch

jstartup/vm/home /usr/java/j2sdk1.4.2_12

INSTANCE_PROPERTIES $(DIR_INSTANCE)/j2ee/cluster/instance.properties

SDM_PROPERTIES $(DIR_INSTANCE)/SDM/program/config/sdm_jstartup.properties

login/create_sso2_ticket 2

jstartup/instance_properties $(INSTANCE_PROPERTIES);$(SDM_PROPERTIES)

ms/server_port_0 PROT=HTTP, PORT=8101

I can move the file into exec directory.

Tkx

Celio

[former_member185954 · Accepted solution]

Hi Celio,

You also need to set the SECUDIR environment variable at the OS level for the user wasadm. and make it point to :

$(DIR_INSTANCE)/sec

Set this variable up:

[Setting Environment Variable in Linux|http://www.codecoffee.com/tipsforlinux/articles/030.html]

Regards,

Siddhesh

[former_member278345 · Accepted solution]

Siddhesh,

I setup the variable but does not working yet

srcs00016:wasadm 52> echo $SECUDIR

/usr/sap/WAS/DVEBMGS01/sec

Tkx

Celio

[former_member185954 · Accepted solution]

Hi Glaucia,

Have you stopped/started SAP after adding the SECUDIR variable to the startup profile of the 'wasadm' userid ?

Also, do you still receive the same error trace ?

Regards,

Siddhesh

[former_member278345 · Accepted solution]

Hi Siddhesh,

Yes, I restarted and still does not working.

Tkx