HTTPS issue while accessing CTS+

[nanda_kumar21]

Hi everyone,

We have SSL configured in our SAP NetWeaver 7.1 PI, and when ever i access CTS+, it gets redirected from HTTP to HTTPS. Is there a way to stop the redirection?

[Former Member]

Hi,

Is it normal that HTTP is redirected to HTTPS?

In my experience, it isn't normal but it happens if the ICM profile parameter 'icm/HTTP/redirect_0' is configured to specifically do that.

Is ICM the reference and wins over the web service configuration in SOAMANAGER?

Just an educated guess here, the ICM configuration should take precedence over the SOAMANAGER configuration as the ICM config is applicable to the entire application server not just specific web services.

How are ICM and SOAMANAGER related then?

Following on from the comment above, to me it makes no sense to enable both http & http communication for the app server in the ICM & then have a redirect to https for http. This would then negate any http type config done in SOAMANAGER. If you don't want plain http communication then disable http in the ICM & only leave https enabled.

Why is a certificate required if the web service has not security set whatsoever?

There is another ICM profile parameter that is relevant in this case because of the HTTPS redirect, it's called 'icm/HTTPS/verify_client'. Possible values are 0, 1 & 2 with different pre-requisites, read more about it here:

http://help.sap.com/saphelp_nw04s/helpdata/en/0d/88153a1a5b4c2de10000000a114084/content.htm

Regards

Karthik.R

[prateek]

Enabling SSL in PI has nothing to do with CTS+ as I understand.

Can you explain where exactly are you facing the problem? At which step or transaction?

Regards,

Prateek Raj Srivastava

[nanda_kumar21]

Hi Prateek,

I click the Integration builder and open it, and from there, tools--> open CTS transport organiser. Here it opens a loging page, which intially hits the http and within a second redirects to https. For now the basis team has removed the parameter

icm/server_port_6    PROT=HTTPS,PORT=52001,PROCTIMEOUT=300,TIMEOUT=60

by which i mean, they disabled the https for now. But we need to know how to stop the re-direction. Also now i notice this SAP warning on the login page.

No switch to HTTPS occurred, so it is not secure to send a password

Please tell me how to solve this.