Server Certificate for SSL (without CSR)

[Former Member]

Hello,

I want to configure SSL on my ABAP AS.

Therefore our Certification Authority (CA) sent me a complete Certificate which I want to import with the Trust-Manager (STRUST). Unfortounately I didn't find a way how to do this.

Is the only way to get a signed certificate by creating a Certificate Signing Request (CSR)?

Best regards

Juergen

[sdipanjan]

Please go through the following contents:

[Using the Secure Sockets Layer Protocol with the SAP Web AS ABAP|http://help.sap.com/saphelp_nw04/helpdata/en/3a/7cddde33ff05cae10000000a128c20/frameset.htm]

[Using the Trust Manager|http://help.sap.com/saphelp_nw04/helpdata/en/0e/fb993af7700577e10000000a11402f/frameset.htm]

[Network Security for SAP Web AS ABAP (SAP Library - SAP NetWeaver Application Server Security Guide)|http://help.sap.com/saphelp_nw04s/helpdata/en/13/bdd13ffc9a4a21e10000000a1550b0/frameset.htm]

Hope these help...

Regards,

Dipanjan

[Former Member]

Hello Dipanjan,

no I'm sorry.

All the documents are describing the way how to get a signed certificate via a CSR.

My question: Is there a way to use a signed certificate without the need of a CSR?

Regards

Juergen

[sdipanjan]

Hi,

Sorry... I couldn't get chance to go through them .. I can provide you few other links.. please check if they are giving you required info:

[Frequently Asked Questions - SAP J2EE Engine 6.20|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/5df9a590-0201-0010-35b1-fceaec857fb3]

[Administration Manual|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/54c79490-0201-0010-3db9-f46c112569e8]

[Administration Manual for SAP J2EE Engine 6.20|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fdb09490-0201-0010-e09e-a76388646ad0]

Regards,

Dipanjan

[Former Member]

> Sorry... I couldn't get chance to go through them ..

I think it is fair to expect that someone will have done a search for themselves before asking a question and already have read help.sap.com docs and easily googlable information.

So doing the same as an answer is not required --> consequently "link-farming" is not encouraged.

Cheers,

Julius

[JMorozowski]

Jurgen,

It is possible to use SSL without a signed CSR, but the clients will receive a message in their browser about the site having an error with the certificate not being signed and the traffic will not be encrypted. So even though you will be able to get to the website, SSL will not truely be working the traffic will not be encrypted.

Jon

[Former Member]

Hi,

>Therefore our Certification Authority (CA) sent me a complete Certificate

I've never seen a CA generate a complete certificate. They just sign the certificate generated by the customer from the CSR file.

It would be a big security problem if the CA knew the customer private key...

>Is the only way to get a signed certificate by creating a Certificate Signing Request (CSR)?

Yes,I think so.

Regards,

Olivier