Endpoint Encryption

Hi expert,

We are using SAP program (external command) to invoke the unix script to encrypt the interface file. Currently the pgp works fine if I execute the script in unix directly. However, it gave error "pgp encrypt 2713: no license has been entered" when I executed the unix script via SAP external command.

below is the unix script:

#!/bin/sh
#cd /opt/freeware/pgp/lib # -> This is the directory of the PGP executable file
LIBPATH=/opt/freeware/pgp/lib; export LIBPATH
/opt/freeware/pgp/bin/pgp   encrypt $1   recipient " "
chmod 777 $1.pgp

Does anyone have any idea how to trouble shooting this?

Thanks,

Norman

(PGP Command Line is not "freeware" so I am curious as to why you placed it in such a directory?)

License information is stored in the preferences file.  Most likely, the SAP program is using a different home directlry (and hence a different preferences file) than what you get when you run the program yourself from the shell.

What version are you running?

Capture the output of the SAP program running "pgp --version --verbose" and compare the "File information" section against what you get if you run the same command yourself.

Note, in the latest version of PGP Command Line it is possible to license the application once, and have that license be valid for all users (though you must do the licensing as a user with sufficient privileges to write into the "global preferences" location).

Regards,

Hi David,

Below is the version info:

laq9sapdv26:crdadm 3> pgp --version --verbose

PGP Command Line 10.2.1 build 54

Copyright (C) 2012 Symantec Corporation

All rights reserved.

Use of this product is subject to license terms.

License information:

State: Valid

Evaluation: No

Expiration: Never

Name: <name>

Email: None

Organization: <Organization name>

License number: <licence no>

Options: Encrypt/Sign enabled

Options: Decrypt/Verify enabled

Number of CPUs allowed: 1-999999

Passphrase cache information:

Cache new passphrases: Disabled

Currently cached passphrases: 0

System information:

Operating system: AIX

Number of CPUs: 8

Time information:

Time zone offset: -4:00

Current time (UTC): 2013-08-01T13:51:33Z

Current local time: 2013-08-01T09:51:33-04:00

File information:

Home Directory: /u/crdadm/.pgp/

Personal Directory: /u/crdadm/.pgp/

Public Keyring: /u/crdadm/.pgp/pubring.pkr

Private Keyring: /u/crdadm/.pgp/secring.skr

Random Seed: /u/crdadm/.pgp/randseed.rnd

PGPsdk information:

Runtime version: 4.2.1 release

FIPS mode: Disabled

Hardware RNG: Not detected

Public key algorithms:

[EDSVG] RSA (PGP) - RSA

[ED--G] Elgamal - Elgamal

[--SVG] Digital Signature Standard - DSA

[--SVG] Elliptic Curve Digital Signature Algorithm - ECDSA

[ED--G] Elliptic Curve Shared Value Derivation – ECSVD

Symmetric ciphers:

IDEA

3DES

CAST5

Twofish

AES128

AES192

AES256

Blowfish

Arc4_128

Hashes:

MD5

SHA

RIPEMD160

SHA256

SHA384

SHA512

Compression:

None

ZIP

ZLIB

BZIP2

Thanks,

Norman

Hi,

It looks like you've captured the output when running from the shell.  What does it look like if the SAP process runs the same command?

Hi David,

I got the error "pgp encrypt 2713: no license has been entered". I think the user is crdadm when SAP calls the script.

The weird part is it's working on other sap boxes with exact same settings. Do you have any suggestions to trouble shooting this?

Thanks,

Norman 

Hi Norman,

Have the SAP program run "pgp --version --verbose" (instead of the actual PGP Command you are trying to run) and capture that output.

Regards,

Hi David,

We changed the unix script and it's working now.

Thanks,

Norman

Great, I'm glad you got it working.

Hi David,

I am experiencing a similar issue with PGP. Error is as below:-

What version are you running, and on what platform?

You have successfully licensed PGP Command Line as that user, but now you are getting that error?  Or you are trying to run as a service process?