Skip to Content
0

The submitted Distiguished Name (DN) does not match the DN

Nov 03, 2017 at 03:16 PM

465

avatar image
Former Member

Hi,

We are changing the server in which the sap router was installed .That is , the private ip address of the sap router will be changed .

The public ip address will however remain the same

So far, we have downloaded SAPCAR,SAPCRYPTOLIB and SAPROUTER from the service market place [in the new server] and extracted them in the /usr/sap/saprouter folder ->extraction done and the environment variables have been adjusted.

In our previous server this is is the distinguished name,which we can see from https://launchpad.support.sap.com/#/saproutercertificate

CN=SAPIDES, OU=0000765484, OU=SAProuter, O=SAP, C=DE

E:\usr\sap\saprouter>sapgenpse get_pse -v -a sha256WithRsaEncryption -s 2048 -no
req -p local.pse -x India@123 "CN=SAPIDES, OU=0000765484, OU=SAProuter, O=SAP, C
=DE"
Got absolute PSE path "E:\usr\sap\saprouter\local.pse".
Supplied distinguished name: "CN=SAPIDES, OU=0000765484, OU=SAProuter, O=SAP, C
=DE"
Creating PSE with format v2 (default)
succeeded.
certificate creation... ok
PSE update... ok
PKRoot... ok

E:\usr\sap\saprouter>sapgenpse get_pse -v -onlyreq -r certreq -p local.pse -x In
dia@123
Opening PSE "E:\usr\sap\saprouter\local.pse"...
No SSO credentials found for this PSE.
PSE (v2) open ok.
Generating certificate request... ok.
Certificate Request:
Signed Part:
Subject: CN=SAPIDES, OU=0000765484, OU=SAProuter,
O=SAP, C=DE
Key: rsaEncryption (2048 bits)
Attributes: None
Signature:
Signature algorithm: sha256WithRsaEncryption (1.2.840.113549.1
.1.11)
Signature: <Not displayed>

After this we went to https://launchpad.support.sap.com/#/saproutercertificate and clicked on SUBMIT CSR-> Then copy pasted the contents of certreq into the service market place and req for certificate

Getting the following error :

The certificate for your SAProuter cannot be issued.Reason:The submitted Distiguished Name (DN) does not match the DN contained in the request for the SAProuter certificate.Solution:Submit a Certificate Request (CSR) with the correct DN for the selected SAProuter.Click on "Request a certificate for SAProuter again" button:

WHICH DN SHOULD WE USE ??

PLEASE SUGGEST

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

3 Answers

avatar image
Former Member Nov 08, 2017 at 03:39 PM
0

HI!

exactly same issue here during a certification request. It always worked okay. I never saw that.

Did you get any solution for this?

Thanks!

Regards,

Janos

Share
10 |10000 characters needed characters left characters exceeded
avatar image
Former Member Feb 09 at 05:27 AM
0

Hi,

Did you end up solving that issue? I have the exact same issue and I think this is due to SAP changing the method on providing certs.

Regards,

Ryan

Share
10 |10000 characters needed characters left characters exceeded
avatar image
Former Member Feb 15 at 10:17 AM
0

Hi,

I've faced the same.

Don't copy paste CSR content to clipboard from RDP, copy the file to your PC then open it.

Somehow contents of clipboard gets messed up when copying from RDP.

Share
10 |10000 characters needed characters left characters exceeded