SSL Not Working after SP16

[brian_arthern2]

Hi,

We had XI 3.0 with SSL Client Certificates working fine until applying SP16.

We are using the SAP Web Dispatcher with end-to-end SSL. The SSL Provider service in the J2EE engine is configured to Require Client Certificates. We have installed a Server certificate and Client certificates signed by our CA in the Key Storage service. The Client certificates have been associated with valid users using the Security Provider service.

When I attempt to connect to the Java home page using Internet Explorer (e.g. https://server:50001) I am correctly asked for my Client Certificate and once supplied, the page opens. Based on the SAP documentation this means SSL is working.

However, when I attempt to make a call to our SOAP adapter, (e.g. https://server:50001/XISOAPAdapter/MessageServlet?channel=:MobileDevices:SOAP_in_order) I am prompted for a username and password with a realm of XISOAPApps. If I enter an invalid username/password I get a 401 http error code; if I enter a valid SAP user/password combo it returns an OK status.

When I look in the logviewer, the following error appears

"User J2EE_GUEST, IP address

HTTP request processing failed. HTTP error [401] will be returned. The error is [No login module succeeded.No details available]."

Prior to SP16 all functioned fine. Now it appears that the request is directed to the ABAP Stack (we have determined that the server is now providing the Server Certificate requested in the Trust Manager whereas before it returned the Server Certificate stored in the Key Storage service on the J2EE Engine. It then appears to decrypt the request and attempt to connect as J2EE_GUEST to the Java engine.

Does anyone have any ideas/suggestions (we are awaiting SAP's investigation but I wish to explore all avenues)

Thanks

Brian

[Former Member]

Hi Brian,

Please take a look at this..

cheers,

Prashanth