Setting SSL

[Former Member]

Hi,

I want to setting the SSL in Enterprise Portals, but I don´t found the Portal Socket in the SSL Provider Service in the Visual Administrator.

In the help.sap.com indicates this:

http://help.sap.com/saphelp_nw70ehp1/helpdata/en/bc/2ee9a2d023d64eac961745ea2cb503/frameset.htm

For each server process that is to support SSL:

1. Select the SSL Provider service.

2. Select the corresponding J2EE dispatcher.

The available sockets and their corresponding ports appear in the Configuration pane.

3. * Select the socket that corresponds to the SSL port you want to configure. *

This socket not appear. What can i do?

More thanks

[Former Member]

Have you created the certiface for ssl_credentials ?

[Former Member]

Sorry, But I can see the sockets. I´ve created the certificate and private key and restarted the portal.

After I´ve restarted the portal, I can see them and appears three ports 50400, 50403 and 50406.

And then which port I´ve to use for access? 50403?

[Former Member]

Hi,

Please refer below link..

http://www.i-barile.it/SDN/EnablingSSL&ClientCertificatesOnTheSAPJ2EEEngine.pdf

Thanks

Deepak

[Former Member]

Thanks Depaak

I´ve reading this guide, but in the SSL Provider service The por 50401 has dissappear. I´ve restarted the porta two times, but This port not appear.

Now I can see the port 50401. I´ve configured in the dispatcher HTTP provider, but I´ve trying the test connection https://host.domain.com:50401

But the test failed.

[Former Member]

Ruben

What is the error that you are seeing can you paste that here so that others can help.

Regards

Vivek

[Former Member]

Hi vivekwali ,

In the log Viewer I can see repeatly the next error message:

java.util.zip.ZipException: error in opening zip file

at java.util.zip.ZipFile.open(Native Method)

at java.util.zip.ZipFile.<init>(ZipFile.java:111)

at java.util.zip.ZipFile.<init>(ZipFile.java:127)

at com.sapmarkets.bam.jmxadapter.AbstractLog.getArchiveInfo(AbstractLog.java:328)

at com.sapmarkets.bam.jmxadapter.AbstractLog.getArchives(AbstractLog.java:454)

at com.sapmarkets.bam.jmxadapter.AbstractLog.getArchives(AbstractLog.java:477)

at sun.reflect.GeneratedMethodAccessor52.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at com.sap.pj.jmx.introspect.DefaultMBeanInvoker.getAttribute(DefaultMBeanInvoker.java:129)

at javax.management.StandardMBean.getAttribute(StandardMBean.java:229)

at com.sap.pj.jmx.server.MBeanServerImpl.getAttribute(MBeanServerImpl.java:1296)

at com.sap.pj.jmx.server.interceptor.MBeanServerWrapperInterceptor.getAttribute(MBeanServerWrapperInterceptor.java:181)

at com.sap.engine.services.jmx.CompletionInterceptor.getAttribute(CompletionInterceptor.java:309)

at com.sap.pj.jmx.server.interceptor.BasicMBeanServerInterceptor.getAttribute(BasicMBeanServerInterceptor.java:169)

at com.sap.jmx.provider.ProviderInterceptor.getAttribute(ProviderInterceptor.java:195)

at com.sap.engine.services.jmx.RedirectInterceptor.getAttribute(RedirectInterceptor.java:232)

at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.getAttribute(MBeanServerInterceptorChain.java:124)

at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.getAttribute(MBeanServerSecurityWrapper.java:234)

at com.sap.engine.services.jmx.ClusterInterceptor.getAttribute(ClusterInterceptor.java:522)

at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.getAttribute(MBeanServerInterceptorChain.java:124)

at com.sapmarkets.bam.logcontroller.jmx.LogControllerFacade.getLogInfo(LogControllerFacade.java:227)

at com.sapmarkets.bam.logcontroller.jmx.LogControllerFacade.getLogInfosWithPattern(LogControllerFacade.java:193)

at com.sapmarkets.bam.logcontroller.jmx.LogControllerFacade.getLogInfos(LogControllerFacade.java:174)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

at java.lang.reflect.Method.invoke(Method.java:324)

at com.sap.pj.jmx.introspect.DefaultMBeanInvoker.getAttribute(DefaultMBeanInvoker.java:129)

at javax.management.StandardMBean.getAttribute(StandardMBean.java:229)

at com.sap.pj.jmx.server.MBeanServerImpl.getAttribute(MBeanServerImpl.java:1296)

at com.sap.pj.jmx.server.interceptor.MBeanServerWrapperInterceptor.getAttribute(MBeanServerWrapperInterceptor.java:181)

at com.sap.engine.services.jmx.CompletionInterceptor.getAttribute(CompletionInterceptor.java:309)

at com.sap.pj.jmx.server.interceptor.BasicMBeanServerInterceptor.getAttribute(BasicMBeanServerInterceptor.java:169)

at com.sap.jmx.provider.ProviderInterceptor.getAttribute(ProviderInterceptor.java:195)

at com.sap.engine.services.jmx.RedirectInterceptor.getAttribute(RedirectInterceptor.java:232)

at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.getAttribute(MBeanServerInterceptorChain.java:124)

at com.sap.engine.services.jmx.MBeanServerInvoker.invokeMbs(MBeanServerInvoker.java:113)

at com.sap.engine.services.jmx.JmxServiceConnectorServer.receiveWait(JmxServiceConnectorServer.java:172)

at com.sap.engine.core.service630.context.cluster.message.MessageListenerWrapper.process(MessageListenerWrapper.java:81)

at com.sap.engine.core.cluster.impl6.ms.MSListenerThread.run(MSListenerThread.java:47)

at com.sap.engine.frame.core.thread.Task.run(Task.java:64)

at com.sap.engine.core.thread.impl6.SingleThread.execute(SingleThread.java:82)

at com.sap.engine.core.thread.impl6.SingleThread.run(SingleThread.java:154

[Former Member]

I was reading the log viewer, and I´ve found this error messages:

Date , Time , Message , Severity , Category , Location , Application , User

05/23/2011 , 15:06:31:265 , Cannot open HTTPS server socket on port 50201Check port for usage by another process.

com.sap.engine.services.ssl.exception.BaseIOException: General I/O Exception.

at com.sap.engine.services.ssl.exception.BaseIOException.wrapException(BaseIOException.java:81)

at com.sap.engine.services.ssl.factory.SSLTransportFactory.getServerSocket(SSLTransportFactory.java:90)

at com.sap.engine.core.port.impl0.TransportLayerImpl.openServerSocket(TransportLayerImpl.java:76)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:270)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:255)

at com.sap.engine.core.service630.context.cluster.session.CommunicationSessionContextImpl.openServerSocket(CommunicationSessionContextImpl.java:82)

at com.sap.engine.services.httpserver.dispatcher.HttpDispatcherFrame.openSocket(HttpDispatcherFrame.java:1178)

at com.sap.engine.services.httpserver.dispatcher.HttpDispatcherFrame.serviceStarted(HttpDispatcherFrame.java:871)

at com.sap.engine.core.service630.container.ContainerEventListenerWrapper.processEvent(ContainerEventListenerWrapper.java:158)

at com.sap.engine.core.service630.container.ContainerEventListenerWrapper.run(ContainerEventListenerWrapper.java:102)

at com.sap.engine.frame.core.thread.Task.run(Task.java:64)

at com.sap.engine.core.thread.impl6.SingleThread.execute(SingleThread.java:82)

at com.sap.engine.core.thread.impl6.SingleThread.run(SingleThread.java:154)

Caused by: java.net.BindException: Address already in use: JVM_Bind

at java.net.PlainSocketImpl.socketBind(Native Method)

at java.net.PlainSocketImpl.bind(PlainSocketImpl.java:331)

at java.net.ServerSocket.bind(ServerSocket.java:318)

at java.net.ServerSocket.(ServerSocket.java:119)

... 14 more

, Error , , com.sap.engine.services.httpserver.dispatcher , ,

05/23/2011 , 15:06:31:250 , EntriesStorage - readEntry(SSL_certificate) in configuration failed with unexpected exception

com.sap.engine.frame.core.configuration.NameNotFoundException: A file entry with the name "SSL_certificate" cannot be found in the configuration "keystore/service_ssl/entries".

at com.sap.engine.core.configuration.impl.ConfigurationData.getFileEntry(ConfigurationData.java:333)

at com.sap.engine.core.configuration.impl.ReadAccessConfiguration.getFile(ReadAccessConfiguration.java:955)

at com.sap.engine.services.keystore.impl.storage.EntriesStorage.readEntry(EntriesStorage.java:96)

at com.sap.engine.services.keystore.impl.StorageManager.readEntry(StorageManager.java:269)

at com.sap.engine.services.keystore.impl.EntriesReadCache.readEntry(EntriesReadCache.java:247)

at com.sap.engine.services.keystore.dispatcher.DispatcherKeystoreManagerWrapperImpl.readEntry(DispatcherKeystoreManagerWrapperImpl.java:84)

at com.sap.engine.services.keystore.spi.EBSDKSKeyStoreSpiImpl.engineGetCertificateChain(EBSDKSKeyStoreSpiImpl.java:177)

at java.security.KeyStore.getCertificateChain(KeyStore.java:312)

at com.sap.engine.services.ssl.keystore.KeyStoreConnector.getCredentials(KeyStoreConnector.java:141)

at com.sap.engine.services.ssl.keystore.KeyStoreConnector.getCredentials(KeyStoreConnector.java:205)

at com.sap.engine.services.ssl.factory.ClientSocketFactory.addCredentials(ClientSocketFactory.java:114)

at com.sap.engine.services.ssl.factory.ClientSocketFactory.addCredentials(ClientSocketFactory.java:99)

at com.sap.engine.services.ssl.factory.ServerSocket.initCredentials(ServerSocket.java:284)

at com.sap.engine.services.ssl.factory.ServerSocket.initialize(ServerSocket.java:439)

at com.sap.engine.services.ssl.factory.ServerSocket.(ServerSocket.java:119)

at com.sap.engine.services.ssl.factory.ServerSocketFactory.createServerSocket(ServerSocketFactory.java:244)

at com.sap.engine.services.ssl.factory.SSLTransportFactory.getServerSocket(SSLTransportFactory.java:87)

at com.sap.engine.core.port.impl0.TransportLayerImpl.openServerSocket(TransportLayerImpl.java:76)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:270)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:255)

at com.sap.engine.core.service630.context.cluster.session.CommunicationSessionContextImpl.openServerSocket(CommunicationSessionContextImpl.java:82)

at com.sap.engine.services.httpserver.dispatcher.HttpDispatcherFrame.openSocket(HttpDispatcherFrame.java:1178)

at com.sap.engine.services.httpserver.dispatcher.HttpDispatcherFrame.setProperties(HttpDispatcherFrame.java:642)

at com.sap.engine.services.httpserver.dispatcher.HttpDispatcherFrame.start(HttpDispatcherFrame.java:246)

at com.sap.engine.core.service630.container.ServiceRunner.startCommunicationServiceFrame(ServiceRunner.java:228)

at com.sap.engine.core.service630.container.ServiceRunner.run(ServiceRunner.java:158)

at com.sap.engine.frame.core.thread.Task.run(Task.java:64)

at com.sap.engine.core.thread.impl6.SingleThread.execute(SingleThread.java:82)

at com.sap.engine.core.thread.impl6.SingleThread.run(SingleThread.java:154)

, Error , , com.sap.engine.services.keystore , ,

05/23/2011 , 15:06:31:250 , Source: com.sap.engine.frame.core.configuration.NameNotFoundException: A file entry with the name "SSL_certificate" cannot be found in the configuration "keystore/service_ssl/entries".; Description: EntriesStorage - readEntry(SSL_certificate) in configuration failed with unexpected exception; Consequences: ; Countermeasures:check log for details , Error , /System/Security , com.sap.engine.services.keystore , ,

05/23/2011 , 15:06:27:687 , ID 011017: : Can't open: "ssl" port:50206. Exception: General I/O Exception. , Error , , com.sap.engine.services.rmi_p4 , ,

05/23/2011 , 15:06:27:687 , EntriesStorage - readEntry(ssl-credentials) in configuration failed with unexpected exception

com.sap.engine.frame.core.configuration.NameNotFoundException: A file entry with the name "ssl-credentials" cannot be found in the configuration "keystore/service_ssl/entries".

at com.sap.engine.core.configuration.impl.ConfigurationData.getFileEntry(ConfigurationData.java:333)

at com.sap.engine.core.configuration.impl.ReadAccessConfiguration.getFile(ReadAccessConfiguration.java:955)

at com.sap.engine.services.keystore.impl.storage.EntriesStorage.readEntry(EntriesStorage.java:96)

at com.sap.engine.services.keystore.impl.StorageManager.readEntry(StorageManager.java:269)

at com.sap.engine.services.keystore.impl.EntriesReadCache.readEntry(EntriesReadCache.java:247)

at com.sap.engine.services.keystore.dispatcher.DispatcherKeystoreManagerWrapperImpl.readEntry(DispatcherKeystoreManagerWrapperImpl.java:84)

at com.sap.engine.services.keystore.spi.EBSDKSKeyStoreSpiImpl.engineGetCertificateChain(EBSDKSKeyStoreSpiImpl.java:177)

at java.security.KeyStore.getCertificateChain(KeyStore.java:312)

at com.sap.engine.services.ssl.keystore.KeyStoreConnector.getCredentials(KeyStoreConnector.java:141)

at com.sap.engine.services.ssl.keystore.KeyStoreConnector.getCredentials(KeyStoreConnector.java:205)

at com.sap.engine.services.ssl.factory.ClientSocketFactory.addCredentials(ClientSocketFactory.java:114)

at com.sap.engine.services.ssl.factory.ClientSocketFactory.addCredentials(ClientSocketFactory.java:99)

at com.sap.engine.services.ssl.factory.ServerSocket.initCredentials(ServerSocket.java:284)

at com.sap.engine.services.ssl.factory.ServerSocket.initialize(ServerSocket.java:439)

at com.sap.engine.services.ssl.factory.ServerSocket.(ServerSocket.java:119)

at com.sap.engine.services.ssl.factory.ServerSocketFactory.createServerSocket(ServerSocketFactory.java:244)

at com.sap.engine.services.ssl.factory.SSLTransportFactory.getServerSocket(SSLTransportFactory.java:87)

at com.sap.engine.core.port.impl0.TransportLayerImpl.openServerSocket(TransportLayerImpl.java:76)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:270)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:255)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTCPListener(PortsManagerImpl.java:243)

at com.sap.engine.core.service630.context.cluster.session.CommunicationSessionContextImpl.openServerSocket(CommunicationSessionContextImpl.java:90)

at com.sap.engine.services.rmi_p4.dispatcher.TransportMonitor.transportSupplierAdded(TransportMonitor.java:342)

at com.sap.engine.core.port.impl0.TransportEventMonitorImpl.transportSupplierAdded(TransportEventMonitorImpl.java:52)

at com.sap.engine.core.port.impl0.PortsManagerImpl.registerTransportSupplier(PortsManagerImpl.java:314)

at com.sap.engine.core.service630.context.cluster.transport.TransportContextImpl.registerTransportSupplier(TransportContextImpl.java:28)

at com.sap.engine.services.ssl.dispatcher.KeystoreListenerImpl.run(KeystoreListenerImpl.java:126)

at com.sap.engine.frame.core.thread.Task.run(Task.java:64)

at com.sap.engine.core.thread.impl6.SingleThread.execute(SingleThread.java:82)

at com.sap.engine.core.thread.impl6.SingleThread.run(SingleThread.java:154)

, Error , , com.sap.engine.services.keystore , ,

05/23/2011 , 15:06:27:687 , Source: com.sap.engine.frame.core.configuration.NameNotFoundException: A file entry with the name "ssl-credentials" cannot be found in the configuration "keystore/service_ssl/entries".; Description: EntriesStorage - readEntry(ssl-credentials) in configuration failed with unexpected exception; Consequences: ; Countermeasures:check log for details , Error , /System/Security , com.sap.engine.services.keystore , ,

05/23/2011 , 15:06:25:078 , Classload error; cannot load library com.sap.ip.bi.sdk.dac.connector.odbodll because referenced component j2eeca not found. , Error , /System/Server , com.sap.engine.core.service630.container.ReferenceResolver , ,

Which will be the main error message for to do the search?

More thanks