enabling the SSL for Sender soap adapter

[Former Member]

HI Experts,

i have scenario for third party ------SAP PI------SAP

i have created the interface it is working fine when the Http security level  as "http"

my client requirement is the should be https connection.

for this i have change the http security level as "https with client authentication"

but third party getting error while sending the request.

we have provided the abap stack certificate to third party please.

please letme know which certitficate am i need to share to third party weather it is "abap certificate" or "java certificate"

for enabling the SSL for this interface am i need to do any internal certificate mapping between abap stack & javastack

thanks in advance

[Former Member]

we have provide the  server certificate which is availble in ABAP stack  (Strust t-code)...

using this third party able to cond=sume the  sap pi https URL

the issue resolved

[kenny_scott]

Hi Mahesh,

the CSS note -

  891877 Message-specific configuration of HTTP-Security

Regards

Kenny

[Former Member]

Hi,

Here are the steps to be followed

http://help.sap.com/saphelp_nw04s/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

Check this out

Re: SSL certificates not visible while RFC destination creation

HTTPS Connection to Ext server/ SSL Client certificates not displayed

-Amol

[Shabarish_Nair]

for enabling SSL use this link - http://help.sap.com/saphelp_nw70/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm

Also for testing purpose, instead if testing from the third party end, can you test using SOAPUI or any other test tool first? That will help drill down the issue better.

[Former Member]

HI Sabarish,

thanks for your reply what exactly issue is.....

i have provided the WSDL which is created from Sender agreement it contains both http & https URLs.

third party able to connect to use https url when http security level as "http" in my Sender SOAP CC

but when i change this as http security level as https with clinet authentication it gives the error.

third party unable to send  the request to SAP PI

we have provided the Abap stack level certificate only

do we need share the java certificate for this interface?

we will not get any certificate from third party

so would it work  above interface with out third party certificate or should we require ?

[Shabarish_Nair]

it depends on what you have used i.e

HTTPS comes in two flavors, both ensuring the confidentiality of data sent over the network

●      Server authentication

Only the HTTP server identifies itself with a certificate that is to be verified by the client.

●      Client authentication

Additionally, the HTTP client identifies itself with a certificate that is to be verified by the server.

Refer this section in the help link i posted earlier;

In the case of a client authentication, the HTTPS client must also have a certificate generated by a CA for self-identification. For validating the HTTPS client’s certificate, the HTTPS server must have a corresponding CA certificate that validates this certificate. After validation of the client’s certificate, the server maps the certificate to an actual system user executing the HTTP request.

The mapping of the certificate differs for AS-ABAP and AS-Java. For more information, see Configuring the System for Using X.509 Client Certificates or Maintaining the User's Certificate Information, respectively.