SAP Knowledge Base Article - Preview

2234709 - "Wrong or missing PIN for PSE" error when configuring the SAP Web Dispatcher to support SSL

Symptom

You try to start the SAP Web Dispatcher and it fails to start service in HTTPS port. The following error is observed in the SAP Web Dispatcher's trace (dev_webdisp):

[Thr 6992] *** ERROR =>   secussl_Create_SSL_CTX():  PSE "<the SAP Web Dispatcher's PSE>": unable to use! [ssslsecu.c   2399]
[Thr 6992] secussl_Create_SSL_CTX: SSL_CTX_set_default_pse_by_name() failed  (1824/0x00000720)
[Thr 6992]    => "Wrong or missing PIN for PSE."
[Thr 6992] >> ---------- Begin of Secu-SSL Errorstack ---------- >>
[Thr 6992] 0x00000720 | SAPCRYPTOLIB | SSL_CTX_set_default_pse_by_name
[Thr 6992] SAPCRYPTO API error
[Thr 6992] Wrong or missing PIN for PSE.
[Thr 6992] 0xa1d5012c | TOKEN_TOKPSE | sec_SSL_CTX_set_asc
[Thr 6992] Wrong PIN
[Thr 6992] << ---------- End of Secu-SSL Errorstack ----------
[Thr 6992] *** ERROR => SapISSLAddCredential(): Error SSSLERR_PSE_ERROR trying to create SERVER Credential
        for "<the SAP Web Dispatcher's PSE>" [ssslxxi.c    2805]
[Thr 6992] *** ERROR => Initialization of SSL library failed -- NO SSL available!
[Thr 6992] =================================================
[Thr 6992]
[Thr 6992] <<- ERROR: SapSSLInit(read_profile=1)==SSSLERR_PSE_ERROR
[Thr 6992] *** ERROR => IcmServInitSSL: SapSSLInit (rc=-40): SSSLERR_PSE_ERROR [icxxserv.c   497]
[Thr 6992] *** WARNING => IcmAddService: Could not start service (rc=-14)


Read more...

Environment

Client/Server Technology - SAP Web Dispatcher (WDP)

Product

SAP NetWeaver all versions

Keywords

SAPWebDispatcher, Webdispatcher, HTTPS, secure, failover, checkconfig, wdisp, dev_webdisp, webdisp , KBA , BC-SEC-SSL , Secure Sockets Layer Protocol , BC-CST-WDP , Web Dispatcher , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.