HTTPS Adapter on PI

[Former Member]

Hi There,

We are trying to integrate our PI system with the external bank interface system for sending XML files. The external system is running WebMethods integration software and using HTTPS protocol for file transfer.

Now for the integration we need HTTPS adapter on our PI system. Do we need to install the HTTPS adapter..? Or does it comes pre configured with the PI installationu2026?

Could you please share a document or the steps for configuring the HTTPS adapter?

I think HPPT comes preconfigured with PI installation -> Tcode SMICM ->Goto-->Services (you will see HTTP service running on port 8000)

Is HTTPS support by both ABAP and JAVA...?

Is SNC required/mandatory for configuring AS ABAP and JAVA for supporting SSL (?

If HTTP comes preconfigured with PI installation, what steps are required for encrypting HTTP file transfer (HTTP over SSl --> HTTPS)

Basically we are the senders and the external system is the receiver, we can also be the receiver in case of acknowledgement is required in the future.

Regards,

Azher.

[Former Member · Accepted solution]

Hi

check this document:

http://help.sap.com/saphelp_nwpi711/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

Francesco

[Former Member]

Hi Prakasu,

After changing the icm/server_port_1 to icm/server_port_3, the SMTP service is appearing but at the same time HTTPS is disappearing.

I tried changing the icm/server_port to icm/server_port_5, but the result was same, the HTTPS service was not appearing, meaning, the icm/server_port is appearing only if it is set to icm/server_port_1 as per my testing.

The below is an extract from help.sap.com, should I try changing all 3 parameters as per below..? If yes, then do I also need to change something else..? Are these parameters (including ports, etc..) used as a reference somewhere in the config..?

[http://help.sap.com/saphelp_nw04s/helpdata/en/56/2e453cabf4ef6fe10000000a114084/content.htm]

****Sample Profile for the ICM****

***The following section specifies a few sample profiles of the SAP NW Application Server. It displays only those parts that are relevant for the ICM and the ICM server cache.***

***You can transfer the following parameter values directly into the instance profile of a SAP NW Application Server.***

***Application Server with HTTP, HTTPS and SMTP Access***

***If you want to configure the SAP NW Application Server for HTTP, HTTPS and SMTP, add (for example), the following lines to your instance profile.***

1. Port definition****

*****icm/server_port_0 = PROT=HTTP, PORT=1080*****

*****icm/server_port_1 = PROT=HTTPS, PORT=1443*****

*****icm/server_port_2 = PROT=SMTP, PORT=1025*****

1. Parameter values for SSL support****

***sec/libsapsecu = $(DIR_EXECUTABLE)/libsapcrypto.so***

***ssl/ssl_lib = $(DIR_EXECUTABLE)/libsapcrypto.so***

[Former Member]

Hi,

****# Port definition****

******icm/server_port_0 = PROT=HTTP, PORT=1080******

******icm/server_port_1 = PROT=HTTPS, PORT=1443******

******icm/server_port_2 = PROT=SMTP, PORT=1025******

This is the parameter you want to do changes. This is only going to affect your ports(Like http,https,smtp port no). We can gave wat ever the ports we required as http ,https,smtp.

****# Parameter values for SSL support****

****sec/libsapsecu = $(DIR_EXECUTABLE)/libsapcrypto.so****

****ssl/ssl_lib = $(DIR_EXECUTABLE)/libsapcrypto.so****

The above parameters is used to enable the SSL. Its one time configuration.these parameters only used for creating certificates in strust.If you chaged these it may affect lot.

Thanks and Regards,

Prakasu.M

[Former Member]

Hi Prakasu,

What is the procedure for chanigng the parameter icm/server_port_1, shoud I change it to icm/server_port_3 straignt in rz10 or something else is required before changing it in RZ10..?

I have also created Server and client SSL PSEs in Trust Manager (STRUST), do I need to recreate them after chaging the parameter icm/server_port_xx..?. HTTPS got activated after creating these PSEs.

Regards,

Azher.

[Former Member]

Hi,

Ask your basis to made change the parameter using rz10. Once change is made you need to restart your PI system. It wont make any impact on your certificate creation using strust.

Thanks and Regards,

Prakasu.M

[Former Member]

Hi Markus,

Thanks a lot for the valuable answer.

The HTTPS adapter has got activated, I can see that in tx SMICM. but the SMTP service is not appearing, only HTTP and HTTPS is appearing and both are active.

The HTTPS is running on port 1443 and HTTP on 8000.

Any idea why SMTP service got disappeared...?

Regards,

Azher.

[Former Member]

Hi,

Normaly default services which have values for http and smtp can used icm/server_port 0 and 1. But https service we need add it manualy. If you used a parameter icm/server_port1 for https it will over wright the smtp service.

Thanks and Regards,

Prakasu.M

[Former Member]

Hi Mohammed,

Good day!

May we ask how did you activated the HTTPS adapter? and be able to view it in SMICM please?

I am having the same condition as per your query.

Thanks a lot!

Godo

[Former Member]

Hi Azher,

the HTTP(S) Adapter runs on the ABAP Stack, i.e. directly on the Integration engine but not on the Adapter engine (=Java)

SSL technically therefore is based on techniques used in the ABAP enviroment.

As we wanted to have this on the Adapter Engie Java Stack, we used the SOAP Adapter instead.

There is a flag "No Soap Header" in the Communication Channel that you can set and then you can use the SOAP Adapter to receive HTTPS requests without any SOAP:

SSL technically is then based on techniques used in the Java enviroment

Hope this was helpful.

Best regards,

Markus