Java SSL communications

[Former Member]

Goal: To get XI to talk SSL to https://<servername>:50001 and other web URLS. Not concerned with interfaces and adapters...yet

Issue: If I enable, it breaks other links.

From an earlier post, I was able to successfully force communication to to ssl....BUT then the links on https://<servername>:50001/rep/start/index.jsp, would fail to load. These links still pointed to non ssl. So the fix for that was to enable com.sap.aii.connect.secure_connections = all in exchangeProfile. This made the links change to ssl and loaded fine....BUT then when you go to Runtime Workbench and try and display, there is an error communicating with the SLD server (a separate machine). I was told that in order for this to work I need to enable HTTP communications in the SLD data supplier in Visual Admin. But that fails to work over HTTPS. The SLD log shows bad certificate. So now, I think, I need to set up certs so they can talk, but it has to be a CA signed one. This will cost money. There has to be a better way.

Is there a way to enable all the SSL, but not affect communications to SLD. Or if there is not, we have have an internal CA, but how do I add that to the trusted CA that SAP server will trust?

I am so confused, this is turning out to be harder than I could have imagined Thanks for the help.

[Former Member]

Hi Jason,

With your post below, i am also confused.

Once you enable SSL according to standard SAP document, all the URLs will work like what you have mentioned above. i.e

https://<servername>:50001/rep/start/index.jsp,https://<servername>:50001/index.html,https://<server... should all work. If they are not, then check the basic SSL configuration.

I have configured many PI systems to use central SLD and SSL and never faced issue as you have described. Even the interfaces will work with the SSL configuration.

So i suggest you to check the basic SSL configuration.

Cheers.......,

Raghu