access /sap/monitoring/SystemInfo to HTTPs fails.

[Former Member]

I have CRM (abap+java ), and I have configured the access HTTPs to ICM

of CRM. If I connect to my j2ee page: https://sapcc1ci.correos.es:1443

works successfully, and all links (User Management, SQL Trace, etc..)

except System Information work successfully.

My link on the J2EE page to 'System Information' points

to /sap/monitoring/SystemInfo

(https://sapcc1ci.correos.es:1443/sap/monitoring/SystemInfo) fails with

error HTTP 404 - file not found. But if I access to HTTP

(http://sapcc1ci.correos.es:50000/sap/monitoring/SystemInfo) works

successfully.

[WolfgangJanzen]

In that case you should check the URL prefix setting of your ICM.

The ICM uses that information to determine where to dispatch an incoming http(s) request to: to the ABAP or the J2EE stack.

See: <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/20/d0f83b4a91ce5ce10000000a11402f/frameset.htm">help.sap.com on "icm/HTTP/j2ee"</a>

Regards, Wolfgang

[Former Member]

Hello,

The parameter icm/HTTP/j2ee_0 had the standard value PREFIX=/,HOST=localhost,CONN=0-500,PORT=50000

With this configuration all URL work successfully except https://sapcc1ci.correos.es:1443/sap/monitoring/SystemInfo

If I modify the parameter to values:

PREFIX=/,HOST=10.88.130.222,CONN=0-500,PORT=50000,SPORT=1443,SSLENC=0,TYPE=0 --> the problem is the same

PREFIX=/,HOST=10.88.130.222,CONN=0-500,PORT=50000,SPORT=1443,SSLENC=0,TYPE=1 --> the problem is the same

PREFIX=/,HOST=10.88.130.222,CONN=0-500,PORT=50000,SPORT=1443,SSLENC=1,TYPE=1 --> the URL https://sapcc1ci.correos.es:1443/ reports the error: Detail: Cannot reach external Application Server on 10.88.130.222:50001 and in the dev_icm appers the message HttpJ2EESetParam: switch j2ee https port from 1443 to: 50001

Other parameters in my system:

icm/server_port_0 = PROT=HTTP,PORT=8000,EXTBIND=1

icm/server_port_1 = PROT=HTTPS,PORT=1443,TIMEOUT=900

icm/HTTPS/verify_client = 1

ssf/name = SAPSECULIB

ssf/ssfapi_lib = /usr/sap/CC1/SYS/exe/run/libsapcrypto.o

sec/libsapsecu = /usr/sap/CC1/SYS/exe/run/libsapcrypto.o

[Former Member]

Hello,

I have generated the certificate, with the steps of http://help.sap.com/saphelp_nw04/helpdata/en/db/1f1740198d8f5ce10000000a155106/frameset.htm, and the type selected is "SAP J2EE Server". I have exported a key or certificate entry to the file system export.csr (attached) and then imported a CSR response im.crt.

I have restarted the icm, anf If I try to connect URL: https://sapcc1ci.correos.es:1443/ the system reports the message Detail: Cannot reach external Application Server on 10.88.130.222:50001

and in the dev_icm reports:

Thr 1286] MatchTargetName("10.88.130.222", "CN=sapcc1ci.correos.es") FAILS

Thr 1286] SSL socket: local=10.88.130.220:34882 peer=10.88.130.222:50001

Thr 1286] <<- ERROR: SapSSLSessionStart(sssl_hdl=1151448b0)==SSSLERR_SERVER_CERT_MISMATCH

Thr 1286] *** ERROR => IcmConnPoolConnect: SapSSLSessionStart failed (-30): SSSLERR_SERVER_CERT_MISMATCH [icxxpool_mt. 1968]

Thr 1286] MatchTargetName("10.88.130.222", "CN=sapcc1ci.correos.es") FAILS

Thr 1286] SSL socket: local=10.88.130.220:34883 peer=10.88.130.222:50001

Thr 1286] <<- ERROR: SapSSLSessionStart(sssl_hdl=1151448b0)==SSSLERR_SERVER_CERT_MISMATCH

Thr 1286] *** ERROR => IcmConnPoolConnect: SapSSLSessionStart failed (-30): SSSLERR_SERVER_CERT_MISMATCH [icxxpool_mt. 1968]

Thr 1286] Wed Feb 21 16:01:56 2007

I have attached the dev_icm_210207.

Other parameters in my system:

icm/server_port_0 = PROT=HTTP,PORT=8000,EXTBIND=1

icm/server_port_1 = PROT=HTTPS,PORT=1443,TIMEOUT=900

icm/HTTPS/verify_client = 1

ssf/name = SAPSECULIB

ssf/ssfapi_lib = /usr/sap/CC1/SYS/exe/run/libsapcrypto.o

sec/libsapsecu = /usr/sap/CC1/SYS/exe/run/libsapcrypto.o

PREFIX=/,HOST=10.88.130.222,CONN=0-500,PORT=50000,SPORT=50001,SSLENC=1,TYPE=1

[desiree_matas]

Hi,

the problem here is that the value for HOST in your icm/HTTP/j2ee_x parameter and the value of the DN in the SSL certificate does not match. They must be the same.

Regards,

Désiré