Unable to start CA SPS Services after enable httpd SSL

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Issue:

Unable to startup SPS after enable httpd SSL with password contains special character (ie: !) after perform following steps.

Password used: !abcd$#

1. Cd to <SPS_install_path>\SSL\bin
2. Execute the command

.\openssl genrsa –des3 –out ..\keys\server.key 2048

(give password when prompted, retain for use in step 8.)

3. Execute the command:

.\openssl req –new –config openssl.cnf –x509 -days 3650 –key ..\keys\server.key –out ..\certs\authazwsdev.crt

4. Edit <SPS_install_path>\httpd\conf\extra\httpd-ssl.conf: ensure that the following parameters are set:

SSLCertificateFile "/CA/secure-proxy/SSL/certs/authazwsdev.crt"
SSLCertificateKeyFile "/CA/secure-proxy/SSL/keys/server.key"

5. Cd to <SPS_install_path>\httpd\bin
6. Execute the command (where password is password provided earlier)

configssl.bat –enable password

7. Restart Secure Proxy Server services:

 

 

Environment

Release:
Component: SMSPS

SPS: R12.8.x 

Cause

Limitation on how cmd treat special character.

Resolution

Edit configssl.bat by add in "setlocal DisableDelayedExpansion" before the command execute. After the command, add "setlocal EnableDelayedExpansion" to have that back to original setting.

ie:

:encryptpwd
setlocal DisableDelayedExpansion
"%SPS_JAVA_HOME%\bin\java.exe" -classpath "%NETE_SPS_ROOT%\Tomcat\lib\proxyutils.jar;%NETE_SPS_ROOT%\Tomcat\lib\smi18n.jar;%CA_SPS_CP_RESOURCES%" com.netegrity.util.SSLUtil %2
setlocal EnableDelayedExpansion
goto done

 

Additional Information:  

https://technet.microsoft.com/en-in/library/bb491001.aspx

http://stackoverflow.com/questions/22278456/enable-and-disable-delayed-expansion-what-does-it-do