Skip to Content
avatar image
Former Member

HANA ONE 64 - Error while saving HTTP destination values

Hi folks,

Recently I spinned up a AWS HANA ONE 64 GB system (https://aws.amazon.com/marketplace/pp/B009KA3CRY?qid=1520945581501&sr=0-2&ref_=srh_res_product_title) and tried to configure a LM transport route to our development system.

The usual steps to create a transport route are described in: https://help.sap.com/viewer/a4d43a319ecf464e9d838454a6bdb9ad/2.0.00/en-us/f6004cc201f44b41b593b9dff27752dd.html

While this worked in the past on other machines without issues the current state of the HANA ONE AMI caused problems when defining the http destination.

Error while saving HTTP destination values
—
Storing credentials to the persistency failed - encryption failure: decryptFinal: wrong or inconsistent padding decrypted! 

I searched for similar errors but couldn't find anything.

Any ideas how to proceed or fix the problem? Glad about any help.

Best,

Mathias

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • avatar image
    Former Member
    Mar 15 at 10:42 AM

    After further investigation I think it is related to the CommonCryptoLib. I executed "sapgenpse" ->

    Loaded CommonCryptoLib from sapgenpse folder"/usr/sap/HDB/HDB00/exe/libsapcrypto.so"
    
    Platform: linux-gcc-4.3-x86-64 (linux-gcc-4.3-x86-64)
    
    Versions: 
      SAPGENPSE 8.5.15 (Aug 17 2017)
      CommonCryptoLib 8.5.15 (Aug 17 2017) [AES-NI,CLMUL,SSE3,SSSE3]
          Build change list: 231750
    
    USER="hdbadm"
    
    Environment variable $SECUDIR is defined:"/usr/sap/HDB/HDB00/hanaserver/sec"

    Additionally the HANA version is:

    HANA version | 1.00.122.13.1507793622
    HANA One version | Rev 122.60
    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Mar 21 at 01:16 AM

    Can you please check following things:

    1. Check that a correct path to the file SSFS_<SID>.DAT is maintained in parameter ssfs_key_file_path of file global.ini.
    2. Check if the file is actually available at the configured location. Copy the file from its backup location if it is not available. If no backup on the file system is available, the SSFS_<SID>.DAT file can be recovered from the SAP HANA Data backup.
    3. Check file permissions on OS level.
    4. Check the network configuration if the file is accessible from host.
    5. Check SSFS file from /usr/sap/<sid>/SYS/global/hdb/security/ssfs/SSFS_<SID>.DAT

    amd, also checkout this article if it helps - https://launchpad.support.sap.com/#/notes/2097613

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      for new HanaOne instance check if the path is correct for ssfs file in /usr/sap/HDB/HDB00/exe/config/global.ini. SSFS key file can be found from /usr/sap/HDB/SYS/global/hdb/security/ssfs.

      And after changing try rebooting the instance.

      NOTE: please remember the changes and if an instance is not starting all required services please revert and restart.