How to update CommonCryptoLib in an ABAP system?
SOLUTION
First, the user needs to ensure that the kernel of the system meets the requirements of CommonCryptoLib compatibility, which is at least 7.20 PL88. If in case the kernel of the system is lower than 7.20 PL88, the user should update the kernel.
Now please download the latest CommonCryptoLib and then extract the files from SAR package.
| Windows X64 | LINUX | Solaris | HPUX ;IA64 | HPUX PA-RISC | AIX | Z/OS |
| sapcrypto.dll | libsapcrypto.so | libsapcrypto.so | libsapcrypto.so | libsapcrypto.sl | libsapcrypto.o | libsapcrypto.so |
| sapcrypto.lst | libslcryptokernel.so | libslcryptokernel.so | libslcryptokernel.so | libslcryptokernel.sl | libsapcrypto.so | sapcrypto.lst |
| sapcrypto.mf | libslcryptokernel.so.sha256 | libslcryptokernel.so.sha256 | libslcryptokernel.so.sha256 | libslcryptokernel.sl.sha256 | libslcryptokernel.o | sapcrypto.mf |
| sapcrypto.pdb | sapcrypto.lst | sapcrypto.lst | sapcrypto.lst | sapcrypto.lst | libslcryptokernel.o.sha256 | sapgenpse |
| sapgenpse.exe | sapcrypto.mf | sapcrypto.mf | sapcrypto.mf | sapcrypto.mf | libslcryptokernel.so | |
| sapgenpse.pdb | sapgenpse | sapgenpse | sapgenpse | sapgenpse | libslcryptokernel.so.sha256 | |
| slcryptokernel.dll | sapcrypto.lst | |||||
| slcryptokernel.dll.sha256 | sapcrypto.mf | |||||
| sapgenpse |
User also need to find the location of the existing sapcrypto library of your system. The location of the sapcrypto library can be found via the current value of below profile parameters:
- ssl/ssl_lib
- snc/gssapi_lib
- spnego/krbspnego_lib
- ssf/ssfapi_lib
- sec/libsapsecu
Now back up the existing library files.
Stop the ABAP system.
Please DO NOT replace the CommonCryptoLib for a running system. It may cause a severe issue.
Now depending on the location of sapcrypto library, the update process will be a little bit different:
a. User need to find the value of parameter "DIR_EXECUTABLE" and "DIR_CT_RUN" of your system via transaction AL11. E.g. on Linux/UNIX platforms:
- DIR_EXECUTABLE: /usr/sap/<SID>/<instance>/exe/
- DIR_CT_RUN: /usr/sap/<SID>/SYS/exe/<uc or nuc>/<platform>/
b. If in case CommonCryptoLib files exist in folder "DIR_EXECUTABLE", user should copy the files of new version CommonCryptoLib to "DIR_CT_RUN".
c. If in case CommonCryptoLib files exist in folder "DIR_CT_RUN", user should copy the files of new version CommonCryptoLib to folder "DIR_CT_RUN".
d. If in case CommonCryptoLib files exist in any other folder, user should copy the files of new version CommonCryptoLib to that folder.
Now start the ABAP system.