Create certificate for WEB DISPATCHER ON WINDOWS

[Former Member]

Hi all,

I am implementing Web Dispatcher on my server.

How can I create the certificate SAPSSL.pse for web dispatcher?

At SAP Server I did use transaction struts but how is it on Web dispatcher?

How can I Active SNC SAPCryptolib PSE system for web dispatcher?

I need SAPSSL.pse for this profile parameter on WD.

ssl/server_pse = E:\usr\sap\WDP\W00\sec\SAPSSL.pse

wdisp/ssl_cred = E:\usr\sap\WDP\W00\sec\SAPSSL.pse

Regards

Reza

[Former Member · Accepted solution]

The answer is her.

http://help.sap.com/saphelp_nwmobile71/helpdata/en/49/4590d23a293b5be10000000a42189b/content.htm

[michael_mulvey · Accepted solution]

Hi Reza,

Beat me to it

Michael

[Former Member · Accepted solution]

Hi Michael,

From This http://help.sap.com/saphelp_nwmobile71/helpdata/en/49/458f193a293b5be10000000a42189b/content.htm

You can maybe help me with this,

How can create * SAP Web Dispatcher's PSEs Using the Trust Manager* ? I have no STRUST transaction on WD server?

Regards

Reza

[Former Member · Accepted solution]

Hi Reza,

You can use whatever Abap system available to use STRUST to create a certificate for a web dispatcher.

Just use the "File" option.

I always use STRUST because I don't have to remember the weird syntax of sapgenpse.exe...

This is just a matter of personal taste.

Regards,

Olivier

[Former Member · Accepted solution]

Hi Olivier,

My WD and MS are in defferent server.

How can I use STRUST in MS to create a certificate for a web dispatcher. Pleas give me some explenation.

Regards

Reza

[Former Member · Accepted solution]

Reza,

I know it is a different server. When you use the file functionality of strust it is used as a utility program like sapgenpse.exe.

You can create an SSL PSE file and copy it afterwards on your web dispatcher server.

Select "file" in STRUST, righ click and select "create". You choose the information to put in the certificate , RSA and the key length and you save the PSE file on a local directory. Very easy to do !

Regards,

Olivier

[Former Member · Accepted solution]

Hi again,

Now I need

SAPSSLC.pse

SAPSSLS.pse

Her is my dev_webdisp trc. form WD

= SSL Initialization on PC with Windows NT

[Thr 2956] = (701_REL,Jan 28 2010,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 2956] profile param "ssl/ssl_lib" = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"

resulting Filename = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"

[Thr 2956] profile param "ssl/server_pse" = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"

resulting Filename = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"

[Thr 2956] = found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe

[Thr 2956] = current UserID: WDPEHT1\SAPServiceWDP

[Thr 2956] = found SECUDIR environment variable

[Thr 2956] = using SECUDIR=E:\usr\sap\WDP\W00\sec

[Thr 2956] = secudessl_Create_SSL_CTX(): PSE "E:\usr\sap\WDP\W00\sec\SAPSSLC.pse" not found,

[Thr 2956] = using PSE "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" as fallback

[Thr 2956] = secudessl_Create_SSL_CTX(): PSE "E:\usr\sap\WDP\W00\sec\SAPSSLA.pse" not found,

[Thr 2956] = using PSE "E:\usr\sap\WDP\W00\sec\SAPSSL.pse" as fallback

[Thr 2956] ******** Warning ********

[Thr 2956] *** No SSL-client PSE "SAPSSLC.pse" available

[Thr 2956] *** -- this will probably limit SSL-client side connectivity

[Thr 2956] ********

[Thr 2956] = Success -- SapCryptoLib SSL ready!

regards

[Former Member · Accepted solution]

Hi

of course the same vej on STRUST.:)

[Former Member · Accepted solution]

Hi,

Usually the SSL server PSE is called SAPSSLS.pse but you decided to call it SAPSSL.pse. It is just a warning.

SAPSSLC.pse is the client certificate, you need one only if you use SSL between the web dispatcher and the back office system..

SAPSSLA.pse is used for Anonymous client connections. I don't see how this could be useful for a web dispatcher.

By the way, all this information is available for you in help.sap.com if you use the serach button....

Regards,

Olivier

[Former Member · Accepted solution]

Olivier,

Thanks agin,

Now My HTTPS ok,

I did activate HTTPS on MS server on SMICM. Is it something els I should do on MS server if I want to user HTTPS from internet throw WD?

How can I stop HTTP call in my WD server and just accept HTTPS?

*Started service 80 for protocol HTTP on host "wdpeht1"(on all adapters) (processing timeout=120, keep_alive_timeout=30)

[Thr 780] =================================================

[Thr 780] = SSL Initialization on PC with Windows NT

[Thr 780] = (701_REL,Jan 28 2010,mt,ascii-uc,SAP_UC/size_t/void* = 16/64/64)

[Thr 780] profile param "ssl/ssl_lib" = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"

resulting Filename = "E:\usr\sap\WDP\W00\sec\sapcrypto.dll"

[Thr 780] profile param "ssl/server_pse" = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"

resulting Filename = "E:\usr\sap\WDP\W00\sec\SAPSSL.pse"

[Thr 780] = found SAPCRYPTOLIB 5.5.5C pl29 (Jan 30 2010) MT-safe

[Thr 780] = current UserID: WDPEHT1\SAPServiceWDP

[Thr 780] = found SECUDIR environment variable

[Thr 780] = using SECUDIR=E:\usr\sap\WDP\W00\sec

[Thr 780] = Success -- SapCryptoLib SSL ready!

[Thr 780] =================================================

[Thr 780] Started service 8400 for protocol HTTPS on host "wdpeht1"(on all adapters) (processing timeout=120, keep_alive_timeout=30)*

[Former Member · Accepted solution]

Sorry Reza,

But search for yourself first for basic questions like these ones and come back here if you have specific difficulties.

I have a real job for which I'm paid...

I cannot spoon feed you at full time...

Regards,

Olivier