Problem Note 55109: In SAS® Environment Manager, emi-framework initialization fails and returns the error "SSL Error: Missing CA trust list"
In UNIX operating environments, emi-framework initialization fails in a Secure Sockets Layer (SSL) environment because the SSLCALISTLOC= system option is not included. This issue affects the second maintenance release of SAS® 9.4 (TS1M2).
Complete the following steps to resolve the problem:
- Open the EVDMAUTOEXEC_STP.sas file that is located in the SAS-configuration-directory/Levn/SAS-application-server/Web/SASEnvironmentManager/emi-framework/Datamart directory. In the file, set the SSLCALISTLOC= system option to point to the location of a valid cacert.pem file.
For example, in the EVDMAUTOEXEC_STP.sas file, add the following line:
SASHome/SASSecurityCertificateFramework/1.1/cacerts
Note: It is best to add the previous line to the file between the LIBNAME and %INCLUDE statements.
- Open the generateHTTPChecksJSON.sas file that is located in the SAS-configuration-directory/Levn/SAS-application-server/Web/SASEnvironmentManager/emi-framework/SASJobs directory.
In the file, edit following line to replace the second equal sign (=) with the word contains:
sc_uri="omsobj:TCPIPConnection?@CommunicationProtocol = 'http'";
The edited line should look similar to the following:
sc_uri="omsobj:TCPIPConnection?@CommunicationProtocol contains 'http'";
- Re-run the initialization process for the emi-framework.
Operating System and Release Information
SAS System | SAS Environment Manager Enablement Kit Server | Microsoft® Windows® for x64 | 2.1 | | 9.4 TS1M3 | 9.4 TS1M3 |
64-bit Enabled AIX | 2.1 | | 9.4 TS1M3 | 9.4 TS1M3 |
64-bit Enabled Solaris | 2.1 | | 9.4 TS1M3 | 9.4 TS1M3 |
HP-UX IPF | 2.1 | | 9.4 TS1M3 | 9.4 TS1M3 |
Linux for x64 | 2.1 | | 9.4 TS1M3 | 9.4 TS1M3 |
Solaris for x64 | 2.1 | | 9.4 TS1M3 | 9.4 TS1M3 |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Emi-framework initialization fails in a Secure Sockets Layer (SSL) environment.
Type: | Problem Note |
Priority: | medium |
Date Modified: | 2015-07-22 14:22:06 |
Date Created: | 2015-01-30 14:29:04 |