BookmarkSubscribeRSS Feed
🔒 This topic is solved and locked. Need further help from the community? Please sign in and ask a new question.
shewzz
Calcite | Level 5

Hi All,

 

I'm Installing SAS VA(HTTPS) in Linux Rhel OS and I follow  below steps.

  1. Pre Installation config
  2. Generate CSR and Signed Certificates (Root, Intermediate CA, Signed Certificate and .key file)
  3. Install SAS Software
  4. Add Certificates to Trusted CA Bundle using sasdm
  5. Configuration 

 

We successfully installed steps 1-4. Our Configuration process stuck and no progress for almost a day in Step 12 : SAS Web Server Configuration. No warning or error message appear so we decided to stop the installation.

 

For your reference please see logs below for the web server. 

 

 

[Fri Aug 11 14:43:59 2017] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?]
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218640442 error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 67710980 error:04093004:rsa routines:OLD_RSA_PRIV_DECODE:RSA lib
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

 

Would like to ask if what would be the possible resolution for this. Hope we can get a quick feedback.

Thank you.

 

Best,

Shew

1 ACCEPTED SOLUTION

Accepted Solutions
alexal
SAS Employee

@shewzz,

 

0D0680A8 - this error is due to an invalid certificate format.

 

  • Additional or trailing spaces
  • Installing a certificate format other than X.509

 

Make sure your file has no trailing or leading spaces within the certificate file. Also, make sure that your private key has no passphrase.

View solution in original post

3 REPLIES 3
shewzz
Calcite | Level 5

Hi All,

 

I'm Installing SAS VA(HTTPS) in Linux Rhel OS and I follow  below steps.

  1. Pre Installation config
  2. Generate CSR and Signed Certificates (Root, Intermediate CA, Signed Certificate and .key file)
  3. Install SAS Software
  4. Add Certificates to Trusted CA Bundle using sasdm
  5. Configuration 

 

We successfully installed steps 1-4. Our Configuration process stuck and no progress for almost a day in Step 12 : SAS Web Server Configuration. No warning or error message appear so we decided to stop the installation.

 

For your reference please see logs below for the web server. 

 

 

[Fri Aug 11 14:43:59 2017] [error] Init: Unable to read pass phrase [Hint: key introduced or changed before restart?]
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218640442 error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 67710980 error:04093004:rsa routines:OLD_RSA_PRIV_DECODE:RSA lib
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218529960 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
[Fri Aug 11 14:43:59 2017] [error] SSL Library Error: 218595386 error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error

 

ss.jpeg

 

Hope we get quick feedback on this. Thank you.

 

Best,

She

alexal
SAS Employee

@shewzz,

 

0D0680A8 - this error is due to an invalid certificate format.

 

  • Additional or trailing spaces
  • Installing a certificate format other than X.509

 

Make sure your file has no trailing or leading spaces within the certificate file. Also, make sure that your private key has no passphrase.

shewzz
Calcite | Level 5

Hi @alexal,

 

Thanks for the response. We will generate new certificate and reconfigure SAS again.

 

Best,

Shew

suga badge.PNGThe SAS Users Group for Administrators (SUGA) is open to all SAS administrators and architects who install, update, manage or maintain a SAS deployment. 

Join SUGA 

CLI in SAS Viya

Learn how to install the SAS Viya CLI and a few commands you may find useful in this video by SAS’ Darrell Barton.

Find more tutorials on the SAS Users YouTube channel.

Discussion stats
  • 3 replies
  • 1389 views
  • 0 likes
  • 2 in conversation