Service Layer Does Not Use Updated SSL Certificate

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 3

2022-08-12 2842870

2842870 - Service Layer Does Not Use Updated SSL


Certificate
Version 2 Type SAP Business One Notes
Language English Master Language English
Priority Correction with high priority Category Program error
Release Status Released for Customer Released On 18.06.2020
Component SBO-SDK-SVL ( Service Layer )

Please find the original document at https://launchpad.support.sap.com/#/notes/ 2842870

Symptom

Service Layer does not use the updated SSL certificate.

Reproducing the issue

Scenario:

You have changed the SSL certificate for the SAP Business One environment as per the following SAP
Notes:

2046101 - Cannot Change Certificate and Database User Password for System Landscape Directory

2677274 - How to Replace the Certificate in the SAP Business One Cloud Environment

Expected behavior:

Service Layer uses the same certificate as the updated one in the server tools component.

Actual behavior:

Service Layer continues to use the old certificate.

Solution

SAP has provided patches in order to solve the problem described. The section References lists the specific
patches available.

After upgrading to a patch level in which these issues have been corrected, you must perform the
following steps to update the certificate:

SAP Business One, version for SAP HANA:

1. Stop the Service Layer service by running command: /etc/init.d/b1s stop


2. Back up server.crt and server.key under /usr/sap/SAPBusinessOne/ServiceLayer/conf.
3. Navigate to the folder /usr/sap/SAPBusinessOne/ServiceLayer/bin,
run ./servicelayer_update_certificate.sh and perform the following:
a. Enter the new certificate location (for example: /home/mycomputer.pfx).
b. Enter the password for the certificate.

© 2022 SAP SE or an SAP affiliate company. All rights reserved 1 of 2


2022-08-12 2842870

Or update the certificate with the following command:


servicelayer_update_certificate.sh pk12keystore pk12keypass

Note:

• pk12keystore is the path of the pfx or p12 certificate.


• pk12keypass is the password of the certificate.

4. Start the Service Layer service by running command: /etc/init.d/b1s start

Workaround before patch level in which these issues were corrected:

Reinstall the server components with the new certificate.

Products

B1 CCC/SLD all versions


SAP B1 9.1 FOR SAP HANA
SAP B1 9.2 FOR SAP HANA
SAP B1 9.3 FOR SAP HANA

This document refers to

SAP Note/KBA Title

2677274 How to Replace Certificates in the SAP Business One Cloud Environments

2046101 Cannot Change Certificate and Database User Password for System Landscape Directory

This document is referenced by

SAP Note/KBA Title

2832113 Overview Note for SAP Business One 9.3 PL12, version for SAP HANA

© 2022 SAP SE or an SAP affiliate company. All rights reserved 2 of 2


2022-08-12 2842870

Terms of use | Copyright | Trademark | Legal Disclosure | Privacy

© 2022 SAP SE or an SAP affiliate company. All rights reserved 3 of 2

You might also like