Skip to Content

certificate error in keystore

hello,

I am getting the following error while uploading the certificate in TrustedCAs,

"Public key fingerprint : java.lang.NullPointerException: while trying to invoke the method iaik.asn1.ASN1Object.getComponentAt(int) of a null object returned from com.sap.engine.services.keystore.impl.util.EntryUtility.getPublicKeyASN"

And if I downloaded certificate from https://www.oanda.com/ Internet then i am getting ECDSA algorithm and it is not working in SAP PI.

If I downloaded RSA algorithm certificate then it is fine in keystore but getting the error in message transmission.

This is existing interface and suddenly stopped due to certificate expiration error, the new certificate is not working.

find the attached error screen shot and error description.

certificate-error.pngcertificate-error-detail.txtRegards,

Khaja

Add comment
10|10000 characters needed characters exceeded

  • Hi Khaja,

    The key size seems to be blank. Can you confirm the same with the old / expired certificate? Also, try uploading the same in any non-prod or sandbox system to narrow down if it is system issue.

  • Get RSS Feed

3 Answers

  • Dec 31, 2016 at 12:20 PM

    hi,

    But surprised the same certificate worked for other .NET applications and not to SAP.

    https://www.oanda.com/

    I taken other certificates from Oanda and it is working fine now.

    regards,

    Khaja.

    Add comment
    10|10000 characters needed characters exceeded

  • Jan 02, 2017 at 05:20 AM

    Hi Khaja,

    Talk to the certificate provider team once whether they have changed their authentication to TLS 1.1 or higher in recent time or not.

    If they have done this then you need to change the SSL.configuration file of SAP PI to support TLS.

    You can refer this blog of Markus -

    https://blogs.sap.com/2016/06/06/outbound-support-for-tls-1112/

    Thanks,

    Apu

    Add comment
    10|10000 characters needed characters exceeded

  • Jan 09, 2017 at 11:55 AM

    hi Apu,

    Thanks for response, I got new certificates from Oanda, that new certificates work in PO.

    Hence closing this thread.

    Add comment
    10|10000 characters needed characters exceeded