error while importing sapgenpse import_own_cert -c srcert -p local.pse

[Former Member]

Bit confused why I am getting below error while executing the command : sapgenpse import_own_cert -c srcert -p local.pse

sapgenpse import_own_cert -c srcert -p local.pse

import_ow_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (9/0x0009) af_verify_Certificates failed

ERROR in ssf_install_certs_into_pse: (9/0x0009) af_verify_Certificates failed

ERROR in af_verify_Certificates: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_verify_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_hash_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_verify_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

ERROR in sec_hash_init: (1538/0x0602) Invalid algorithm

Algorithm id-salted-hash (OID 1.2.840.113549.1.1.11)

[Former Member]

Which version of SAP Cryptographic library are you using?

[former_member185954]

Hello Sunil,

Can you describe what  you were trying to do ? some context around what is the scenario and why are you executing the command.

Regards,

Siddhesh

[former_member182657]

Suggest you to follow SAP Note   846813 - B2A: Troubleshooting, PKCS#7 encryption for health ins fund

Regards,

[Former Member]

Hi Sunil,

Please check the following note.

846813 - B2A: Troubleshooting, PKCS#7 encryption for health ins fund

1. "ERROR in ssf_install_CA_response: (1280/0x0500) No certificate with your public key found". The following message is also displayed when you import the certificate response manually with "sapgenpse import_own_cert -c BN<company number>.p7c -p BN<company number>.pse -x <PIN> -v": "No certificate with your public key found in supplied input ...

import_own_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (1280/0x0500) No certificate

with your public key found".

Cause: The PSE file into which you want to import the certificate response no longer matches the PSE file from which the certificate request (P10) was created. This means that after the certificate request was created the PSE file was created again with the same name or swapped with a file with the same name.

Solutions:

(1) You still have access to the "old" PSE file and replace the current PSE file with the "old" PSE file. You then import the certificate response.

(2) If the "old" PSE file no longer exists, you must repeat the certification. If you use report RPUSVKD0, you must enter the data for the certificate request again (step 2) and then create and send the printouts (step 3). This can be forced by entering "RD" as the background parameter pa_next. (SAP Note 872509 "Special questions about the encryption", point 15).

d) RPUSVKD0 or SAPGENPSE - The following error message is displayed when you import the certificate response from the ITSG (P7C):

"import_own_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (1280/0x0500) Unrecognizable data in input file: "/xxx/BNxxxxxxxx.P7C" ERROR in ssf_read_certs_from_file: (1280/0x0500) input neither

PEM-framed nor plain-base64 nor ASN.1 DER".

1. Cause: The certificate response is in the format ASN.1 BER instead of ASN.1 DER.

Thanks

Adil