Skip to Content
author's profile photo Former Member
Former Member

error while importing sapgenpse import_own_cert -c srcert -p local.pse

Bit confused why I am getting below error while executing the command : sapgenpse import_own_cert -c srcert -p local.pse

sapgenpse import_own_cert -c srcert -p local.pse

import_ow_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (9/0x0009) af_verify_Certificates failed

ERROR in ssf_install_certs_into_pse: (9/0x0009) af_verify_Certificates failed

ERROR in af_verify_Certificates: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_verify_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_hash_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_verify_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_hash_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

Add a comment
10|10000 characters needed characters exceeded

Related questions

4 Answers

  • author's profile photo Former Member
    Former Member
    Posted on May 15, 2015 at 04:05 AM

    Hi Sunil,

    Please check the following note.

    846813 - B2A: Troubleshooting, PKCS#7 encryption for health ins fund


        1. "ERROR in ssf_install_CA_response: (1280/0x0500) No certificate with your public key found". The following message is also displayed when you import the certificate response manually with "sapgenpse import_own_cert -c BN<company number>.p7c -p BN<company number>.pse -x <PIN> -v": "No certificate with your public key found in supplied input ...

              import_own_cert: Installation of certificate failed

                  ERROR in ssf_install_CA_response: (1280/0x0500) No certificate

                      with your public key found".

                          Cause: The PSE file into which you want to import the certificate response no longer matches the PSE file from which the certificate request (P10) was created. This means that after the certificate request was created the PSE file was created again with the same name or swapped with a file with the same name.

                              Solutions:

                                  (1) You still have access to the "old" PSE file and replace the current PSE file with the "old" PSE file. You then import the certificate response.

                                    (2) If the "old" PSE file no longer exists, you must repeat the certification. If you use report RPUSVKD0, you must enter the data for the certificate request again (step 2) and then create and send the printouts (step 3). This can be forced by entering "RD" as the background parameter pa_next. (SAP Note 872509 "Special questions about the encryption", point 15).
                                        d) RPUSVKD0 or SAPGENPSE - The following error message is displayed when you import the certificate response from the ITSG (P7C):

                                            "import_own_cert: Installation of certificate failed

                                                ERROR in ssf_install_CA_response: (1280/0x0500) Unrecognizable data in input file: "/xxx/BNxxxxxxxx.P7C" ERROR in ssf_read_certs_from_file: (1280/0x0500) input neither

                                                    PEM-framed nor plain-base64 nor ASN.1 DER".

                                                    1. Cause: The certificate response is in the format ASN.1 BER instead of ASN.1 DER.


                                                    Thanks


                                                    Adil

                                                    Add a comment
                                                    10|10000 characters needed characters exceeded

                                                  1. Posted on May 15, 2015 at 07:44 AM
                                                    Add a comment
                                                    10|10000 characters needed characters exceeded

                                                  2. Posted on May 15, 2015 at 08:48 AM

                                                    Hello Sunil,

                                                    Can you describe what you were trying to do ? some context around what is the scenario and why are you executing the command.

                                                    Regards,

                                                    Siddhesh

                                                    Add a comment
                                                    10|10000 characters needed characters exceeded

                                                  3. author's profile photo Former Member
                                                    Former Member
                                                    Posted on May 15, 2015 at 11:29 AM

                                                    Which version of SAP Cryptographic library are you using?

                                                    Add a comment
                                                    10|10000 characters needed characters exceeded

                                                  Before answering

                                                  You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
                                                  You must be Logged in to submit an answer.

                                                  Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.