Skip to Content
0
Former Member
May 18, 2010 at 08:46 AM

SAP Router Issue - Certificate Renew

63 Views

Dear Guru's,

My router certificate is going to expire next month, so we planned to renew the certificate. During the renewal of certificate we are facing some issue. After creating the certificate, we try to import the certificate using below command. its throwing an error message.

-


E:\usr\sap\saprouter>sapgenpse import_own_cert -c srcert -p local.pse

Please enter PIN:

import_own_cert: Installation of certificate failed

ERROR in ssf_install_CA_response: (9/0x0009) af_verify_Certificates failed

ERROR in ssf_install_certs_into_pse: (9/0x0009) af_verify_Certificates failed

ERROR in af_verify_Certificates: (12851/0x3233) Verification of one certificate

of path failed

ERROR in sec_decrypt_Digest: (12848/0x3230) verification failed, see decrypted d

igest

0 1BFB09A2 7906F81F 20A83BB6 F9CFF0C7

10 2E80C3B3 08724B4A E39F06DF 968216A9

20 8AFD4476 8606C506 00609A70 79490D06

30 99FA5B70 F8444E50 68682FAC E0702301

40 A2C6F213 8CA8AE6E 551798F9 F59FD1F4

50 007F72D4 1530436B 99883EDD 52C65277

60 1E28BD9A 1A8375F6 19C55749 CA61EEC0

70 70D6FCFD E2C9EED8 29A9257C 5CB95A71

ERROR in d_DigestInfo: (18/0x0012) decoding error for : "DigestInfo"

ERROR in sec_decrypt_Digest: (12848/0x3230) verification failed, see decrypted d

igest

0 1BFB09A2 7906F81F 20A83BB6 F9CFF0C7

10 2E80C3B3 08724B4A E39F06DF 968216A9

20 8AFD4476 8606C506 00609A70 79490D06

30 99FA5B70 F8444E50 68682FAC E0702301

40 A2C6F213 8CA8AE6E 551798F9 F59FD1F4

50 007F72D4 1530436B 99883EDD 52C65277

60 1E28BD9A 1A8375F6 19C55749 CA61EEC0

70 70D6FCFD E2C9EED8 29A9257C 5CB95A71

ERROR in d_DigestInfo: (18/0x0012) decoding error for : "DigestInfo"

ERROR in af_pse_get_CertificatePairSet: (4130/0x1022) Can't read object CrossCSe

t : "CrossSet"

ERROR in sec_read_PSE: (4130/0x1022) object is not in toc : "CrossSet"

ERROR in sec_read_object_from_toc: (4130/0x1022) object is not in toc : "CrossSe

t"

ERROR in af_pse_get_PCAList: (4130/0x1022) Object PCAList doesn't exist

-


Could anyone suggest me for the above issue.

regards,

Guna