SSL certificate update: cannot analyze certificate

[Bernd Welter]

Hi SAP folks,

one of my customers tried to update his certificate store after having received this info about a new certificate.

Unfortunately he failed. As I do not know SAP S/4 HANA by myself I kindly ask the community for help:

I cannot upload the new PTV server certificate
I downloaded it from here: PTV xServer internet – SSL certificate update 2023 – PTV xServer Blog (ptvgroup.com)

While trying to upload it in SAP S/4 HANA system, I’m getting the following error message: Cannot analyze certificate.
Did you have similar issues with other customers? If yes, can you share how it was solved?

4803.png (3.41 KiB) Viewed 61 times

Thanks for any help!
Best regards,
Bernd

[Howard]

Hello,

if I remember correctly there are different file types for certificates. The SAP Basis I dealt with in the past always complained that we send them the "incorrect" format. We usually just gave them the URL and they got the certificate themselves. So unfortunately I cannot really say what is wrong, but my suggestion would be to try out a different format type.

Good luck!

[co.bo]

Hello,

it seems that the certificate you are trying to upload is in PFX format, which is a bundled file containing the private key and the public SSL certificate. To use this certificate in your SAP S/4 HANA system, you might need to convert it to a different format or extract the required components.

Here are the steps to convert the PFX file to the required formats:

• First, extract the .pfx file from the .zip archive you downloaded. You can use any archive extraction software like WinZip or 7-Zip to do this.
• Next, you'll need to install OpenSSL on your system if you haven't already. OpenSSL is an open-source toolkit that can be used to convert certificates between different formats. You can download it from the official website: https://www.openssl.org/source/
• After installing OpenSSL, open a command prompt or terminal window and navigate to the directory where the extracted .pfx file is located.
• To convert the PFX file to a PEM file containing the certificate and private key, execute the following command:
  

  Code: Select all

  openssl pkcs12 -in wildcard_cloud_ptvgroup_com_316416_USER.crt.pfx -out certificate.pem -nodes

  Replace 'wildcard_cloud_ptvgroup_com_316416_USER.crt.pfx' with the actual file name if it is different. This command will create a new PEM file called 'certificate.pem' containing both the certificate and the private key.
• Now, you might need to extract the certificate and private key separately. To do this, open the 'certificate.pem' file in a text editor and save the sections between '-----BEGIN CERTIFICATE-----' and '-----END CERTIFICATE-----' as 'certificate.crt', and the sections between '-----BEGIN PRIVATE KEY-----' and '-----END PRIVATE KEY-----' as 'privatekey.key'.

After converting the PFX file and extracting the required components, you should be able to upload the certificate and private key to your SAP S/4 HANA system. If you still encounter issues, please consult the SAP S/4 HANA documentation or contact their support team for further assistance.

kind regards
Boris

[felix.glueck]

Thanks for the detailed responses Howard and Boris