HTTPS with Client Authentication in SOAP sender Adapter --SSL

[former_member223432]

We have an interface SOAP to file..which was working fine...now we recently switched to F5 load balancer and hence we were asked to chnage the settings in Communication channel.

After changing the communication channel to u201CHTTPS with Client authenticationu201D..client trggerd the some data but nothing seems to be coming in PI..

No trace in communication channel either.where else can we check for the incoming data ?

Is there any other setting required? why the data s not coming to PI?

Regards

[baskar_gopalakrishnan2]

We also use F5 load balancer. Since you use ssl , tell your firewall team to enable port 500001 between F5 and PI. You should be fine.

[former_member223432]

Thanks bhaskar,

is it the standard port number "500001" between F5 and PI? anything else u want me to check in PI?

we are using PI 7.1....any extra setting?

your reply would really be appreciated.

thnx

[prateek]

>>is it the standard port number "500001" between F5 and PI?

This is configurable. It could be some other port as well. The port which sends the data outside network for HTTPS communication should be open.

You may deploy TCPGateway on PI to trace the soap calls. More information on TCPGateway can be searched on SCN.

Regards,

Prateek Raj Srivastava

[former_member223432]

Hi prateek/baskar,

i tried pinging the F5 load balancer Ip address from PI instnace and all seems going well....

No idea as to why nothing is reaching PI....

here is our flow.

BANK client----> F5load balanceer----> PI.......

as per the above flow, , traffic is definitely being forwarded to PI....i see succesfull status in F5..but nothing is reaching PI...no trace in CC....any suggestion please?

regards

[former_member223432]

Any valuable input please

thanks

Edited by: ayrahcaanilan on Feb 6, 2012 2:01 PM

[baskar_gopalakrishnan2]

Check whether Bank client able to reach F5. Also You might want to talk with F5 administrator and check whether he could able to see that messages are leaving F5 and reaching PI. I suspect still the messages are not leaving F5 at all.

[former_member223432]

Hi Baskar,

thanks for your reply... F5 guy has shared a screenshot where it shows the status in "green"- succesfull.

and he is sure that the traffic is definetly being forwarded to PI..

however it doesnt show any message/content..

any suggestion please?

regards

Edited by: ayrahcaanilan on Feb 8, 2012 10:23 AM

[Former Member]

Dear Arya

Please check the URL (for PI) which is configured in F5 server.

Is it with web dispatcher or with the Central instance. Try altering these URLs.

There is a possibility that the webdispatcher port is not open ...

Sourabh

[former_member223432]

Hi,

here is the flow: Bank>F5-->PI.

when the Bank client send the message

they are getting the message below. Could you please tell me what could be the reason?

<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>

<!-- Call Adapter

-->

<SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">

<SAP:Category>XIAdapterFramework</SAP:Category>

<SAP:Code area="MESSAGE">GENERAL</SAP:Code>

<SAP:P1 />

<SAP:P2 />

<SAP:P3 />

<SAP:P4 />

<SAP:AdditionalText>com.sap.aii.af.ra.ms.api.DeliveryException: Invalid SSL message, peer seems to be talking plain!</SAP:AdditionalText>

<SAP:ApplicationFaultMessage namespace="" />

<SAP:Stack />

<SAP:Retry>M</SAP:Retry>

</SAP:Error>

regards

[Former Member]

Hi

Is your F5 server converting th Https to Http?? Please check this with the F5 Administrator.

Also Try the scenario by changing the HTTP Security level in your adapter to HTTP

[former_member223432]

Hi sourabh,

thanks for your reply.

we were asked to change our PI communication channel to HTTPs with client authentification...earlier it was just HTTP... since they have SSL and with F5..they would want to go with this option.

when Bank send some data,....the traffic comes to F5....with F5, the traffic does not terminate at F5u2026 instead it is forwarded PI server.

Are we miissing any settings here?