Determine SSL port to use on ABAP

[dan_pfingsten2]

Trying to determine an available port to use for enabling SSL on abap.

I have already gone through the steps of adding the necessary profile parameters for ssl and importing certificates into strust for SSL.

Parameters icm/server_portxxx requires a port and so does icm/HTTP/redirect_0.

For example:

icm/server_port_1 = PROT=HTTPS, PORT=<port>, TIMEOUT=900

icm/HTTP/redirect_0 = PREFIX=/, FROM=*, FROMPROT=http, PROT=https, HOST=<host>, PORT=<port>

Would appreciate any input into how to determine which port to use or how to configure one if necessary.

Ports I have tried for example: 443, 1443, 8443, 8117

As far as I can tell the ports are not being used.

But if I try a: telnet <host> <port> the telnet will not connect and when starting SAP the dev_icm trace file shows that https is not activated for any of those ports.

And if I go to smicm and try to activate https it will not activate but throws the same error in dev_icm saying it cannot activate https on the port.

Thanks for any input!

[Former Member · Accepted solution]

Hi,

Please read the below doc for all the knowledge about the ports by SAP applications and how to enable a port on SAP system.

However you can enable the port in your system by adding that entry in /etc/services files on Unix servers. Once you have added the port in services file, take a restart of the SAP system and than if you telnet that port from outside and if some services are occupying that port, you should get a response.

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/4e515a43-0e01-0010-2da1-9bcc452c...

With Regards,

Saurabh

Edited by: Saurabh.Arora on Jun 21, 2009 6:02 PM

[martin_E]

Have you got the SAPCRYPTO lib installed ? Its a prerequisite for any encryption (SSL included).

[dan_pfingsten2]

Thanks for the responses.

yes, I did have the cryptolib installed.

Adding the port correctly resolved the issue.

I used a port from the 44xxx range for https (according to the document referenced), added that port to the profile parameters, added it to /etc/services as service https and restarted sap.

I could then telnet to the port and SSL appears to be working.

Thanks!