Basis Errors and Solutions

Symptom

Problems with SAPCRYPTOLIB in one of the various usage scenarios, e.g.:
SSL in SAP WebAS and Netweaver (icman, sapwebdisp) and for saphttp
SSF with encryption (HR-ELSTER, Credit card encryption,…)
SSF with digital signatures (SAP logon ticket, SAP license check)
SNC between SAP backend software components
or for SAP remote support over the Internet using SAProuter
SAPCRYPTOLIB contains all of the functionality of SAPSECULIB. When SAPCRYPTOLIB is installed for the ABAP kernel (disp+work) on SAP 46D or SAP WebAS/Netweaver with the three profile parameters described in note 510007 (ssf/name, ssf/ssfapi_lib, sec/libsapsecu) it will completely substitute SAPSECULIB.
Other terms

SAPCRYPTOLIB, SAPGENPSE, SSL

Solution

The SAP Cryptographic Library (SAPCRYPTOLIB) is available for download *ONLY* through the SAP Service Marketplace. See note 397175 for details on download and export regulations.
SAPCRYPTOLIB is packaged per-platform (not per SAP Software-Release), and for most platforms several versions of SAPCRYPTOLIB are distributed. If there is more than one binary in the distributed archive, then there will be a textfile (such as “aix.txt” for IBM AIX or “sunos.txt” for SUN Solaris) accompanying the libraries that lists which binary of SAPCRYPTOLIB is needed for which particular release of the SAP (kernel) software.
Download note: Starting with 5.5.5pl22 SAPCRYPTOLIB is distributed in the newer SAR-Archive format, which requires the SAPCAR tool for unpacking. For some transitional time files using the older CAR archive format will be available on the download page, but the availability of CAR archive files is going to be discontinued at some point in the future.

SAPCRYPTOLIB Release History:
Date Version what/why OSS-note
———————————————————————– Apr-2001: 5.5.5pl1 Initial Release
23-Nov-2001: 5.5.5pl7 Update
05-Dec-2001: 5.5.5pl8 SAPGENPSE file/cert reading (456912)
07-Dec-2001: 5.5.5pl9 SAPGENPSE base64-decoding (457744)
08-Apr-2002: 5.5.5pl10 several new features,some fixes (511150)
18-Apr-2002: 5.5.5pl11 fix for SSL server deadlock (514596)
24-Sep-2002: 5.5.5pl12 SSL-Client and STRUST problems (554174)
12-Dec-2002: 5.5.5pl14 support multilevel CA-Hierarchy (594133)
08-Mar-2004: 5.5.5pl15 multithreading-fixes, (690999)
CA interop fixes, SSF Encryption
12-Jun-2004: 5.5.5pl16 ASN.1 fixes, PKCS#12-support (745063)
17-Aug-2005: 5.5.5pl17 Misc Fixes, Important MS-Win fix (871671)
02-Apr-2007: 5.5.5pl19 PKCS#1, 710+, PSE(v4) (1042745)
16-Apr-2007: 5.5.5pl20 fix two pl19 regressions (1047610)
22-May-2007: 5.5.5pl21 sapgenpse fix and update (1058307)
20-Nov-2007: 5.5.5pl22 SSL client fix, WSSec support (1115328)
25-Jan-2008: 5.5.5pl23 Fix for crash in SSL (regression)1135743)
19-Jun-2008: 5.5.5pl24 crypto fix,import_p8, SAP ByD (1159829)
07-Jul-2009: 5.5.5pl26 bugfixes and WS-Security update (1357841)
———————————————————————–

Directions for SAP Service Marketplace (Nov 2001)

(start with the given URL and follow the vertical menu hierarchy):
SAPCRYPTOLIB software download:
http://service.sap.com/TCS
Download Area -> SAP Cryptographic Software

SSL for WAS and SNC Documentation:
http://service.sap.com/security
Security in Detail -> Infrastructure Security

OSS support via Internet using SAProuter+SNC:
http://service.sap.com/Access-support
Remote Connectivity -> Internet Connections

Where to find SAPCAR executable on SAP Service Marketplace
(tested on 09-Nov-2004):
start with URL: http://service.sap.com/download
in the left hierarchy follow this path:
SAP Software Distribution Center
+– Download
+– Support Packages and Patches
–
– Entry by Application Group
then click “Additional Components” in the list on the right
then click “SAPCAR” in the next list
then click “SAPCAR 6.20″ in the next list
then click “SAPCAR 6.20″ in the next list to open the OS-type list
then click on the name of the OS for which you need SAPCAR
then go to the box that appears and click on the filename
for a direct download of the executable.
There seems to be a confusion about the content type of the download, you may have to manually append the extension “.EXE” to the filename if you download the Microsoft Windows NT executable to make it usable.