HTTPS in java

[Former Member]

Hi all,

I am looking forward for your reply for the https activation in my landscape.Recently I have installed a new Netweaver 2004 portal server.At the time of installation I have installed the SAP cryptgraphic tool kit as well by giving the security level as strong. After that I have tried to change the settings in the config tool for the Https port and verified it in the browser level.Its not worked out for me. I have configured SSl for abap and I have downloaded license file and applied it in strustsso2.

Is there anythign we have to do the same for java? Kindly advice me for the same.

Thanks and Regards

Vijay

[Former Member · Accepted solution]

Follow the steps in the below thread: also go through the below help document.

/thread/1207698

http://help.sap.com/saphelp_nw70/helpdata/EN/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

Prerequisites:

 -Download SAP Cryptographic ToolKit at http://service.sap.com/ swdc and -> SAP Crypto-graphic Software -> SAP JAVA CryptoToolkit (J2EE Engine as of Release 6.30)
-Unzip it with SAPCAR
Logon in SDM and deploy the file
Check in Visual Admin -> Dispatcher/Server -> Libraries -> core_libs iaik_jce.jar is included
Loof for SSL Service in Config Tool in Server and Dispatcher, it should be "always"
Steps:
-Asking for a certificate
Visual Admin -> Cluster -> Server (central instance ) -> Services -> Key storage -> Service_ssl -> Create
Fill in all the data, and be careful with the common name:
-It shouldn´t have "http" or "https" on it
-It shouldn´t have port number on it
For example: "https
www.myportal.domain:port", the common name should be "www.myportal.domain"
Visual Admin -> Key Storage -> service_ssl -> Select your certificate and u201CGenerate CSR Requestu201D
Send the file to a CA
-Importing the validated certificate:
Visual Admin -> Key Storage -> Import CSR Response
In each Server, under SSL Provider, assign the certificate to port 50001, in each Dispatcher
Now, the portal is secure, and you can check it now.
A last step would be export the certificate and send it to your Network Team, so they can export it in the load balancing server, reverse proxy, etc.  

Regards,

Jazz

[Former Member · Accepted solution]

Thanks Jazz,

Its solved My problem.

Regards

Vijay