Web dispatcher "Error : PSE file ,unable to use! "

[former_member451492]

Hello,

I has a SAP Netweaver kernel 7.01 with oracle database.

I tried to config web dispatcher to support ssl by following the link below.

[http://help.sap.com/saphelp_nw04s/helpdata/en/39/09a63d7af20450e10000000a114084/content.htm]

I has done all step successfully.

But when I started web dispatcher I got these error in the log file.

[Thr 8688]   profile param "ssl/server_pse" = "E:\webdispatcher\sec\SAPSSL.pse"
           resulting Filename = "E:\webdispatcher\sec\SAPSSL.pse"
[Thr 8688] *** ERROR =>   secudessl_Create_SSL_CTX():  PSE "E:\webdispatcher\sec\SAPSSL.pse": unable to use! [ssslsecu.c   1735]
[Thr 8688] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --
  secude_error 1824 (0x00000720) = "Wrong or Missing PIN for PSE"
[Thr 8688] >> ---------- Begin of Secude-SSL Errorstack ---------- >>
[Thr 8688] ERROR in SSL_CTX_set_default_pse_by_name: (1824/0x0720) Wrong or Missing PIN for PSE : "E:\webdispatcher\sec\SAPSSL.pse"

ERROR in ssl_set_pse: (1824/0x0720) Wrong or Missing PIN for PSE : "E:\webdispatcher\sec\SAPSSL.pse"

ERROR in af_open: (1824/0x0720) Wrong or Missing PIN for PSE : "E:\webdispatcher\sec\SAPSSL.pse"

ERROR in secsw_open: (1824/0x0720) Wrong or Missing PIN for PSE : "E:\webdispatcher\sec\SAPSSL.pse"

ERROR in sec_parse_PSEInfo_cont: (1824/0x0720) Wrong or Missing PIN for PSE : "E:\webdispatcher\sec\SAPSSL.pse"

[Thr 8688] << ---------- End of Secude-SSL Errorstack ----------
[Thr 8688] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "E:\webdispatcher\sec\SAPSSL.pse" [ssslxxi.c    2324]
[Thr 8688] *** ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 8688] =================================================

I search the forum but didn't see "file pse unable to use!" issue.

Is this about wrong certificate when import cer to PSE file or something else?

Any help will be appriciate.

Thank you

Chai

[former_member195313]

Hello All ,

Please try to RESETTING PIN for related PSE

Syntax;

sapgenpse seclogin -p <RelatedPSE> -chpin -x <PIN> -xn ""

You can check the following steps for the solution.

Wrong or Missing PSE

Best Regards.

Fatih YUKSEL

[jay_b2]

Use:

sapgenpse seclogin -p D:\usr\sap\ABC\DVEBMGS28\sec\ABC.pse -O SAPServiceABC

[kundangandhi]

Hi,

I am facing same issue.

Please revet, if you resolved the same.

pasting log here.

Response will be appreciated.

_______________________________________________________________

---------------------------------------------------

trc file: "dev_webdisp", trc level: 1, release: "720"

---------------------------------------------------

sysno 00

sid WD1

systemid 390 (AMD/Intel x86_64 with Linux)

relno 7200

patchlevel 0

patchno 68

intno 20020600

make multithreaded, ASCII, 64 bit, optimized

profile /usr/sap/WD1/SYS/profile/WD1_W00_sapportal

pid 4382

[Thr 140272010733408] Fri Nov 1 11:41:50 2013

[Thr 140272010733408] started security log to file ./dev_icm_sec

[Thr 140272010733408] SigISetDefaultAction : default handling for signal SIGCHLD

[Thr 140272010733408] SAP Web Dispatcher running on: sapportal.abrajoman.com

[Thr 140272010733408] MtxInit: 30001 0 2

[Thr 140272010733408] ***LOG IM1=> IcmInit, Startup (SAP Web Dispatcher&sapportal.abrajoman.com&4382&) [icxxrout_mt. 1914]

[Thr 140272010733408] IcmInit: listening to admin port: 65000

[Thr 140272010733408] MPI: dynamic quotas disabled.

[Thr 140272010733408] MPI init: pipes=4000 buffers=1279 reserved=383 quota=10%

[Thr 140272010733408] CCMS: AlInitGlobals : alert/use_sema_lock = TRUE.

[Thr 140272010733408] CCMS: Initalized shared memory of size 40000000 for monitoring segment.

[Thr 140272010733408] CCMS: Checking Downtime Configuration of Monitoring Segment.

[Thr 140272010733408] IcrCoreInitSessionTable: Session table initialized

[Thr 140271863756544] HttpExtractArchive: files from archive /usr/sap/WD1/SYS/exe/run/wdispadmin.SAR in directory /usr/sap/WD1/W00/data/icmandir are up to date

[Thr 140271863756544] HttpISubHandlerAdd: Added handler HttpAdminHandler(0x7f9390000e70), slot=0, flags=36869) for /sap/admin, active: 1, table 0x7f9390000a10

[Thr 140271863756544] HttpISubHandlerAdd: Added handler HttpModHandler(0x7f93900012e0), slot=1, flags=12293) for /, active: 1, table 0x7f9390000a10

[Thr 140271863756544] CsiInit(): Initializing the Content Scan Interface

[Thr 140271863756544] AMD/Intel x86_64 with Linux (mt,ascii,SAP_CHAR/size_t/void* = 8/64/64)

[Thr 140271863756544] CsiInit(): CSA_LIB = "/usr/sap/WD1/SYS/exe/run/libsapcsa.so"

[Thr 140271863756544] HttpISubHandlerAdd: Added handler HttpAuthHandler(0x7f9390001440), slot=2, flags=12293) for /, active: 1, table 0x7f9390000a10

[Thr 140271863756544] HttpISubHandlerAdd: Added handler HttpWebDispHandler(0x7f9390008340), slot=3, flags=1060869) for /, active: 1, table 0x7f9390000a10

[Thr 140271863756544] Started service PORT=8100,PROT=HTTP,TIMEOUT=60,PROCTIMEOUT=60

[Thr 140271863756544] =================================================

[Thr 140271863756544] = SSL Initialization platform tag=(linuxx86_64_gcc41)

[Thr 140271863756544] = (720_REL,Oct 15 2010,mt,ascii,SAP_UC/size_t/void* = 8/64/64)

[Thr 140271863756544] profile param "ssl/ssl_lib" = "/usr/sap/WD1/exe/libsapcrypto.so"

[Thr 140271863756544] resulting Filename = "/usr/sap/WD1/exe/libsapcrypto.so"

[Thr 140271863756544] = found SAPCRYPTOLIB 5.5.5C pl36 (Jul 3 2013) MT,AESNI,NB

[Thr 140271863756544] = current UserID: "wd1adm", env-var USER="wd1adm"

[Thr 140271863756544] = using SECUDIR=/usr/sap/WD1/W00/sec

[Thr 140271863756544] profile param "ssl/server_pse" = "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] resulting Filename = "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] *** ERROR => secudessl_Create_SSL_CTX(): PSE "/usr/sap/WD1/W00/sec/epssl.pse": unable to use! [ssslsecu_mt. 1735]

[Thr 140271863756544] secudessl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed --

[Thr 140271863756544] secude_error 1824 (0x00000720) = "Wrong or Missing PIN for PSE"

[Thr 140271863756544] >> ---------- Begin of Secude-SSL Errorstack ---------- >>

[Thr 140271863756544] ERROR in SSL_CTX_set_default_pse_by_name: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] ERROR in ssl_set_pse: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] ERROR in af_open: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] ERROR in secsw_open: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] ERROR in sec_parse_PSEInfo_cont: (1824/0x0720) Wrong or Missing PIN for PSE : "/usr/sap/WD1/W00/sec/epssl.pse"

[Thr 140271863756544] << ---------- End of Secude-SSL Errorstack ----------

[Thr 140271863756544] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential

for "/usr/sap/WD1/W00/sec/epssl.pse" [ssslxxi_mt.c 2324]

[Thr 140271863756544] *** ERROR => Initialization of SSL library failed -- NO SSL available!

[Thr 140271863756544] =================================================

[Thr 140271863756544]

[Thr 140271863756544] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR

[Thr 140271863756544] *** ERROR => IcmServInitSSL: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv_mt. 251]

[Thr 140271863756544] *** WARNING => Could not start service (rc=-14) PORT=8300,PROT=HTTPS,TIMEOUT=60,PROCTIMEOUT=900,VCLIENT=0 [icxxserv_mt. 651]

[Thr 140272010733408] SigISetDefaultAction : default handling for signal SIGCHLD

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 0

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 1

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 2

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 3

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 4

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 5

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 6

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 7

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 8

[Thr 140272010733408] IcmCreateWorkerThreads: created worker thread 9

[Thr 140271863756544] IcmWatchDogThread: watchdog started

[Thr 140271847081728] Fri Nov 1 11:42:57 2013

[Thr 140271847081728] *** ERROR => NULL bytes in HTTP request {0005000c} [http_plgrt_mt.c 6025]

[Thr 140271847081728] CONNECTION (id=5/12):

used: 1, type: default, role: Server(1), stateful: 0

NI_HDL: 59, protocol: HTTP(1)

local host: 192.168.22.2:8100 ()

remote host: 192.168.2.8:56650 ()

status: READ_REQUEST

connect time: 01.11.2013 11:42:57

MPI request: <c> MPI response: <d>

request_buf_size: 65464 response_buf_size: 0

request_buf_used: 122 response_buf_used: 0

request_buf_offset: 0 response_buf_offset: 0

[Thr 140271847081728] Address Offset REQUEST:

[Thr 140271847081728] ------------------------------------------------------------------------

[Thr 140271847081728] 0x7f9399f8d068 000000 16030100 75010000 71030152 73499529 |....u...q..RsI.)|

[Thr 140271847081728] 0x7f9399f8d078 000016 9f988ed3 cb861e2f 7260cac7 978a9a30 |......./r`.....0|

[Thr 140271847081728] 0x7f9399f8d088 000032 b74f3103 f3feea03 2b336a00 0018002f |.O1.....+3j..../|

[Thr 140271847081728] 0x7f9399f8d098 000048 00350005 000ac013 c014c009 c00a0032 |.5.............2|

[Thr 140271847081728] 0x7f9399f8d0a8 000064 00380013 00040100 0030ff01 00010000 |.8.......0......|

[Thr 140271847081728] 0x7f9399f8d0b8 000080 00000e00 0c000009 73617070 6f727461 |........sapporta|

[Thr 140271847081728] 0x7f9399f8d0c8 000096 6c000500 05010000 0000000a 00060004 |l...............|

[Thr 140271847081728] 0x7f9399f8d0d8 000112 00170018 000b0002 0100 |.......... |

[Thr 140271847081728] ------------------------------------------------------------------------

[Thr 140271847081728] *** ERROR => HttpPlugInHandleNetData: HttpParseRequestHeader failed (rc=701) [http_plgrt_m 2250]

Trace File

   (7784bytes)

Line: Filter:

________________________________________________________________

Thanks,

Kundan

[former_member4224]

Did you create the correct credentials to the PSE?

[Former Member]

After PSE creation, did you restart AS or Service?