Installing sapcryptolib and enabling SSL

[Former Member]

Hi,

I want to enable HTTPS for my SAP web services. So:

- I downloaded sapcryptolib for win x64,

- copied files into DIR_EXECUTABLE,

- copied ticket to DIR_INSTANCE/sec

- added SECUDIR environment variable

- in transaction rz10 added parameters to instance

- save changes and reboot whole machine

then I go to strust transaction and see only:

- System PSE

- File

- SSF E-Learning

in each manual people write that I have to see also 'SSL server standard' and some other things... I don't.

When I go to Environment -> SSL Server indices I've got a message that SAPCRYPTOLIB is not installed.

I tried to create some PSE file, but whatever I do it doesn't change anything.

Any ideas? Thanks in advance

[Former Member · Accepted solution]

May be reading this thread will help you!!

Also you need to restart SMICM after setup.

Regards,

[Former Member · Accepted solution]

Thanks. Regarding to that thread I looked for ICM trace and got this:

http://img25.imageshack.us/img25/8523/tracekw.jpg

I created PSE file and saved it in sec directory, but nothing has changed. Still the same error.

Edited by: pw.skiba on May 28, 2010 3:39 PM

[former_member289039 · Accepted solution]

Hi,

Have you set the below parameters in the instance profile,Please also refer note 662340,

ssf/ssfapi_lib = <Path and file name of SAPCRYPTOLIB>

sec/libsapsecu = <Path and file name of SAPCRYPTOLIB>

you need to restart your system after setting the above profile.

Regards,

prakash

[Former Member · Accepted solution]

yes there are set. The problem was with this SAPSSLS.pse file. I created it again and now have message in ICM trace:

'Success - sapcryptolib ready' - but in STRUST I still can't use it. The same error: 'sapcryptolib not installed'.

[former_member227283 · Accepted solution]

Hi,

Goto

SMICM->Goto->Parameters->Display

And the paste the value in the forum of HTTPS parameter.

Thanks

Anil

[Former Member · Accepted solution]

Hi,

Please go through Note 510007 - Setting up SSL on Web Application Server ABAP if this could help in solving the issue.

Thanks & Regards,

Sharath

[Former Member · Accepted solution]

Ok, after whole SAP restart strust finally see sapcryptolib. But I'm still having fun with it.. Do you know where could I find any note about certificates? What I've done is:

- in strust created system PSE

- then in strust created SSL Server Standard PSE

- added certificate to a list

- restart ICM

..and what now?

when I try https, browser throw: Error 107 (net::ERR_SSL_PROTOCOL_ERROR) in Chrome and just 'page cannot be displayed' in other browsers. Each SSL-running manuals for SAP ends here. So what's wrong? Could it be something with CN= ? I set IP address there because server doesn't have domain and web services or anything else are used by IP.

Some screenshots:

http://img688.imageshack.us/img688/4237/tracevn.jpg

http://img153.imageshack.us/img153/8480/strust.jpg

http://img227.imageshack.us/img227/8786/params.jpg

Edited by: pw.skiba on May 31, 2010 3:25 PM

[Former Member · Accepted solution]

I've also created standard client PSE and anonymous client PSE. For each PSE I generated request, I obtained test ssl response from sap services and imported it. Still nothing. For example when I try to open /soamanager it automatic redirect me to https with port 8102 which I set in parameters... but can't display site. ANY ideas?

[Former Member · Accepted solution]

solved. I changed port to 11111.