SAP HANA: check_pse_store.cc(00178) : Trying to add invalid certificate as part of own certificate PEM

If you try to manage your HANA certificates via SQL you might want to set the “OWN CERTIFICATE” where you come across the following error in your SQL Commandline:

Could NOT EXECUTE 'ALTER PSE HANA_X509 SET OWN CERTIFICATE '-----BEGIN RSA PRIVATE KEY----- ...'
SAP DBTech JDBC: [5634]: Certificate definition inconsistent

Werbung

Looking at the indexserver trace you will find:

[113263]{213394}[35/-1] 2016-05-24 15:44:56.384001 e Crypto           check_pse_store.cc(00178) : Trying TO ADD invalid certificate AS part OF own certificate PEM: exception  1: no.301116  (Crypto/CertAdm/CertStore/CertificateStoreChecker.cpp:83)
    Basic constraints  NOT supported WITH certificate version !

Show Stacktrace ▼

The versions that i tried were 102.3, 102.4 and 102.5 where this occurred. After an Upgrade to 102.6 or to 112.2 or 112.0 this is solved. Confirmed by the release note 2290067 – SAP HANA SPS 10 Database Maintenance Revision 102.06:

Fixed a bug that causes the CREATE CERTIFICATE FROM ‘…’ statement to fail with “SAP DBTech JDBC: [5634]: Certificate definition inconsistent when used with certain types of certificates.” error message.

Published by

Uli

IT-Nerd und Admin

Leave a Reply

Your email address will not be published. Required fields are marked *