SAP Web Dispatcher

[Former Member]

Hi experts!

We want to use SAP WEB Dispatcher to connect from Internet to our SAP server. Weu2019ve installed SAP WEB Dispatcher in the server that is situated in DMZ. Its domain name krrXXXX.europe.nnn.com. We want to use SSL Termination (https:http) .

Our question is about Creating the PSEs and Certificate Requests. We are using sapgenpse. The SAP Cryptographic Library is installed on the SAP Web Dispatcher and the environment variable SECUDIR is set to the directory where the license ticket is located.

In case we want to use SAP CA: what is the right syntax for distinguish name in this case?

sapgenpse get_pse -p SAPSSLS.pse -x abcpin -r abc.req "CN=krrXXXX.europe.nnn.com, OU=I00XXXXXX-CCCCCl, OU=SAP Web AS, O=SAP Trust Community, C=DE" - is it right?

Do we have to use in this command inner domain_name = krrXXXX.europe.nnn.com or outer-name like sapweb.xxxxxxl.com.ru?

[Former Member · Accepted solution]

Hi,

You have to use the outer-name like sapweb.xxxxxxl.com.ru because the SSL server certificate must match the URL used on the Web browser. That is the wole point of using signed certificates : The user wants to be sure to connect to the right server and accepts to trust a well known certification authority.

Regards,

Olivier

[Former Member]

Thank you, Olivier!