SSF error

Hi,
We are creating some Adobe Interactive forms and storing them on server. Using the abap code we are generating an url pointing to the specific stored pdf and passing back to the java program to display it on the page. While opening the pdf through the url link, we are getting an error saying
SSF error: Invalid signer
Any clue what could be the reason?
Thanks,
Sujit

Hello Sujit,
Regading SSF error:
This status indicates that an external security product has been installed and that a system PSE exists on the application server; however, the system PSE can not be accessed. The most common cause of this error is
that no credentials exist on the application server. Use the function Create credentials to correct this error.
For Create credentials for the system PSE Use menu path->
" PSE -> Create credentials" The application server needs credentials to access its system PSE. Although credentials normally exist for an application server, occasionally you may haveto create new ones, for example,
for a newly configured application server that has not yet accessed its system PSE.
Hope this will help you.
Thanks
Anirudh Saini

Similar Messages

Digital signature error- SSF Error

Hi,
I am trying to do a digital signature using signature method " System signature with Authorisation by User ID and Password" but facing an error after I enter my password during the digital signature.
Error is "SSF error: Unknown Error"
Message No: IS014
Please let me know what needs to be done to resolve this error.
Setting completed are QM Material Authorisation group cretaed for Result Recording and Usage Decision Digital Signature.
Thanks
Vineeth

Check and if necessary maintain the standard settings. To do this, execute the following activities in the IMG under SAP Web Application Server -> System Administration -> Digital Signature:
Define application-dependent parameters for SSF functions
Define security settings for the system
Also In IMG check settings under >> SAP Netweaver--> Application Server > System Administration -> Maintain the Public Key information for the system> Maintaining the system security information.

Archive url access throws error "SSF error: Decoding not possible"

Hi
We are using function module HRWPC_RFC_EP_READ_PHOTO_URI to pull the photo of an employee in ESS.
When we paste the url in browser we get following error
SSF error: Decoding not possible
Can anyone help to resolve this.
regards
barin

Barin,
check these links
1060613 SSF error, Decoding not possible
983550 SSF-Error occurs when viewing attachments of a solution
https://forums.sdn.sap.com/click.jspa?searchID=17894100&messageID=5942357
https://forums.sdn.sap.com/click.jspa?searchID=17894100&messageID=6347898
Thanks
Bala Duvvuri

Digital Signature- SSF error: Unable to find external security product

Dear Friends,
After I enter my User ID and Password, this displays this error !!!
SSF error: Unable to find external security product
Would really appreciate your help.
Thanks,
Sri

Hi Sri,
Would you pls check the installation of the security toolkit on your application server?
Which security product do you use?
The standard security product is SAPSECULIB (library sapsecu.dll).
Please check the SSF initialization messages which are contained in each dev_w## developer trace (transaction ST11). When successful, the initializaion messages look like this:
N =================================================
N === SSF INITIALIZATION:
N ===...SSF Security Toolkit name SAPSECULIB .
N ===...SSF trace level is 0 .
N ===...SSF library is /usr/sap/<SID>/SYS/exe/run/sapsecu.dll .
N ===...SSF hash algorithm is SHA1 .
N ===...SSF symmetric encryption algorithm is DES-CBC .
N ===...sucessfully completed.
N =================================================
General information for SAPSECULIB can be found in SAP note 354819.
Best regards,
Christoph
P.S.: Please reward points for useful information.

SSF error: Decoding not possible

Hi all,
I need to get the absolute URI from a DOC_ID (TOAHR table), to display an employee photo in the browser.
I'm trying with the following FM:
SCMS_AO_URL_READ
ARCHIVELINK_URL_GENERATE
but both returns me sy-subrc = 0, the same URL and the same error message:
"SSF error: Decoding not possible"
when I'm copying the returned URL in the browser...
anybody could tell me what's the problem / error?
Thanks!
Miguel Angel.

ok i've got it....
i used cl_crm_documents=>get_with_url to geht the urls.
the returning value is cutted in the gui after some chars. thats why copy and past didn't work for me.
but variable conatains the complete url, althoug the complete url isnt shown on the gui.
i tried something like this, and it worked:
CALL FUNCTION 'CALL_BROWSER'
EXPORTING
   URL                          = lv_url
EXCEPTIONS
   FRONTEND_NOT_SUPPORTED       = 1
   FRONTEND_ERROR               = 2
   PROG_NOT_FOUND               = 3
   NO_BATCH                     = 4
   UNSPECIFIED_ERROR            = 5
   OTHERS                       = 6

FM CCARD_ENVELOPE SSF Error: Unknown error in external security prod

Hi all,
Im still new in SAP. I am trying to run function module CCARD_ENVELOPE to encrypt a credit card number in tcode se37. After i input the credit card number and run it,it shows me an error ENVELOPE_FAILED, Error when encrypting payment card data: SSF error: Unknown error in external security prod. Can anyone tell me more about this problem.?

I think this cannot be executed in SE37.
Go to SE24 and paste this class->method - CMD_EI_API_CHECK, hit enter and go to method GET_ENCRYPT_CREDIT_CARD.
The above class-method should help you for your original requirement.
-Veer
Edited by: veerendranath Maddula on Sep 17, 2011 4:58 AM

SSF error: Invalid signer, Message no. 1S005

Hello Everyone,
We are in the process of configuring the content server in our customer's landscape.
Post the definition of content repository and the associated storage category,in the CSADMIN section,in the certificates tab, an error that reads SSF error: Invalid signer, Message no. 1S005 is thrown up whenever we attempt to send the certificate.Toggling values of 'Security' and ' Check Signature' fields doesn't help either.
Could anyone shed light on this issue and possible solution?
Note:We have not enabled/configured digital signature strategy and all the previous posts in the forum on this topic are in-conclusive.
Regards,
Pradeepkumar Haragoldavar

Dear Pradeep
The error message "Invalid signer" actually exactly means what the
message text says: the system where the error occurred was unable
to verify the signer of a signed document, most likely because the
related certificate could not be found.
Please check the following:
- Does a PSE exist on the signing system for the intended purpose?
(check: communication with a content server) (TA STRUST)
- Does PSE use a subject name that consists of 7bit ASCII
characters only?
- Has the certificate been distributed to the receiving system ?
Which security toolkit do you use (SAPSECULIB or SAPCRYPTOLIB)?
Please check the version of your installed security toolkit (TA STRUST,
menu "Environment > Display SSF Version").
Please also check for any error messages that may occurr at the
SSF initialization phase (ST11)
if you are using SAPCRYPTOLIB for SSF, please see note 662340
Regards
Tushar Dave

PCUI Error(SSF error : Invalid signer)

Hi All
we have implemented the PCUI functionality in portal thru CRM 4.0 Business package. all bsp pages are working fine.
but when i click on the activities link in portal and then i selected one particular order documents in Activities page , when i click to open that documet then it is opening in the new window with the error
"<b>SSF error : Invalid signer</b>"
but when try to open the same document in CRM system it is opening fine.
( Actually documents are created in different formats like PDF,CSV and XML)
Can you help me how to solve this "SSF error:Invalid signer " in portal for Activities link in PCUI application
Regards
Sunil

Hi,
I am facing the same error in OAC0 although the connection to the external Documentum Server is successful as shown by Test Connection.
Can anyone suggest either the possible reasons or a solution to this.
Note: I have tried to tick/untick the "No Signature" box.

MySapEvalLogonTicketEx failed: standard error =4, ssf error= 0

I am experiencing a problem with Netweaver where sporadically, the logfile reports: MySapEvalLogonTicketEx failed: standard error =4, ssf error= 0, which I understand translates to "Expired ticket".
What I dont understand is this usually happens upon the first logon to the application in question.
My users log into EP, and follow a link to an application that evaluates the ticket and allows access upon successful evaluation.
When I recieve this error, if I refresh the webpage a few times, the exception dissapears from my logs, and the app behaves normally and allow me in.
Can anyone shed any light on the subject, or perhaps point me in the right direction?
Edited by: Lakeith Collins on Jan 17, 2008 5:30 PM

What is the timeout setting on the portal for the SS02 cookie when it is issued?
System administration-> system configuratiion - UM configuration- security setting
The default is 8 hrs.
Are you testing with a user that nobody else it using? i.e. not a shared test user for example...?

Error while configuring digital signatures.

Hi,
I am running the program DSIG_BOOKING_EX to configure the digital signatures. I get the error :
SSF error: Unable to find external security product.
When i execute the program SSF02 i get a success message.
Regards,
Sridevi

Is the Issue resolved,....
I couldn't get any info.....
Please help me if it is resolved

I have a question, about SSF !(u5173u4E8ESSFu7684u95EEu9898)

Hi,guys!
I have a question, about SSF.I want my webdynpro program can get employee photo in ECC6.0.So i find a BAPI,it name is:HRMSS_RFC_EP_READ_PHOTO_URI.I import parameter PENER with employeeID,other parameter is default.It returns a URI,but this URI was been encrypt.I copy the URI into IE,the IE told me:SSF error,can not decode.So my question is:in this instance,what should I do?
Thanks! I am very vexation,online waiting!

Dear Mr. XU,
this is a community driven forum, meaning most answers are given by community members volunteering and contributing free time. If you'd like to express your vexation, you might better use the SAP based support channels such as OSS.
Community members are in general not motivated to answer questions that are posted in such a mood.
As I'm an SAP employee myself, I have to apologize that I cannot answer this question due to a lack of understanding it and again have to ask you to check with OSS.
With kind regards,
Benny Schaich

Error with sapssoext

Hi,
I am running the often refered to sample java program to parse and inspect mysso2 ticket (Class SSO2Ticket) .
I am getting the following error :
D:\Temp>java SSO2Ticket -i d:
temp
mysso.txt
SAPSSOEXT loaded.
static part ends.
Start SSO2TICKET main
test version -
Version of SAPSSOEXT: SAPSSOEXT 2
evalLogonTicket
java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 5, ssf error
= 26
Does anyone know what it is ?
It is happening in evalLogonTicket .
Thank you.

Hi Thierry,
Error-Text: SSF_API_NOCERTIFICATE
this "explanation" can be found in sapssoext.h of the C-implementation of ssoext.
It should mean (I am always careful here ) that the ticket has been signed by a system, who's public key is not (yet) imported into the keystore (.pse file) used by ssoext.
Solution: Try to follow these steps:
1) On the machine that creates the logon ticket export the public key / certificate to a file (cert.txt) by
sapgenpse export_own_cert -p SAPSYS.pse -o cert.txt
2) Then copy cert.txt to the machine that should verify the logon ticket
3) Import cert.txt into the .pse file ("ssoext-PSE") on the machine verifying your ticket by
sapgenpse maintain_pk -a cert.txt -p ...pse
I assume that this solves your problem.
Please be aware that this direct exchange of public keys is not necessarily what you want: Maybe you prefer to have the key of the system that creates the logon ticket signed by an certification agency (CA). In this case it can be sufficient to import the public key / certificate of the CA into your "ssoext-PSE" file.
Please let me know whether you could follow those steps.
Best regards,
Ralf

MySapEvalLogonTicketEx Error codes

Hi Everyone,
I am trying to decrypt my SAP SSO cookie using the .dll provided by SAP and I am getting the following exception.
Please let me know if any of you guys know what this error means:
java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 20, ssf error= 7
Just as a side note, my SSO decryption used to work fine till we did a reinstall of the J2EE engine. My gut feeling is that this error has something to do with the Public Access Key being incorrect or the password for the Key being incorrect. However, I am not sure...
Any help would be really appreciated!
Thanks
MOY

Sorry for bringing up this old thread again, but I'm still having problems with the provided solution receiving the exact same error message the threadstarter had: java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 20, ssf error= 7
I got the verify.der file from our Netweaver and imported it into my local, default Java keystore.
keytool -list -v
gives me the aliasname "portal" and the entry type of "trustedCertEntry" so the import was succesful I guess.
However, when providing my default keystore using the native evalLogonTicket method:
Object o[] = evalLogonTicket(StringOfSsoCookie, System.getProperty("user.home") + "\\.keystore", "keystorepwd");
I keep getting the aforementioned exception meaning "Signature couldn't be verified" and "Priv.Addr.Book not found" (accoding to sapssoext.h). The keystore file does exist, though. The path is correct.
Is it even correct to provide the absolute path to the very keystore file ? How does evalLogonTicket know to use the alias "portal" to read the cert from the keystore ?
My approach is based on [this wiki entry|http://wiki.sdn.sap.com/wiki/display/EP/Single%20Sign-On%20to%20Non-SAP%20Backends] which unfortunatley doesn't provide any real code example of the evalLogonTicket call.
Thanks in advance,
Patrick

SAPLOGONTICKET not verfied by SAPSSOEXT (error 1281)

I try to validate a SAPLOGONTICKET within an external application. I have saved the ticket in a text file and run SSO2Ticket.main with the ticket file name as parameter. sapssoext.dll and sapsecu.dll are available to the application and are accessed (getVersion returns: "SAPSSOEXT 2").
The method evalLogonTicket throws an Exception
MySapEvalLogonTicketEx failed: standard error= 1281, ssf error= 0
The ticket file consists of one line ASCII-text with one blank and some slashes (for technical reasons I can't reproduce it here.)
Any ideas what this error code will tell me?
Gerhard

At last, I have fixed also this. As "verify.der" is a certificate (and not a keystore), it can be read directly with
CertificateFactory.getInstance("X.509","SUN").generateCertificate(stream);
Another problem is that the tickets transmitted from the ApplicationIntegrator in POST requests sometimes contain blanks, which have to be replaced by "+" characters.
After a long week of research, the Java version finally works. Thanks for all help and good ideas,
Gerhard
BTW: The JNI version still does not work, presumably because verify.der is a certificate and not a pab (std error=20, ssf error=7: PAB not found)

SSO to non SAP Application (ASP)

We have followed the sample steps for SSO to non SAP Applications in ASP, but we're receiving the following results:
Start SSO2TICKET main
Version: SAPSSOEXT 2
Ticket verifying failed. Return codes error=1 and ssf error=0
Does anyone know what the problem is and how to solve it?
Thanks!

hi ive,
u cn refer to this links.......these r some of the blogs that u cn go throu.its useful.
<b>User Mapping-based Single Sign On,
SAP Logon Ticket-based Single Sign-On>
regards
bhargava

SSF error

Similar Messages

Maybe you are looking for