Required Both connection type http and https

[Former Member]

Hello,

is there a way to configure a system for portal content (NetWeaver CE 7.1 Java System) with a connection type http and https? Now I use http and it works fine but some user required https for the portal.
I need both types of connections.

Thanks
Ashish

[Former Member]

Hi Ashish,

check if Note 1507174 is helpful

Regards,

Amit

[Former Member]

Hi Ashish,

Thats very much possible. You just need to implement SSL in your environment. After this is implemented, you will be able to access portal from both.

Here is the SSL implementation guide for you -

http://wiki.sdn.sap.com/wiki/display/EP/Configuring+the+Use+of+SSL+on+the+SAP+J2EE+Engine

This will resolve your query. If you face problem in implementation, get in touch with your basis team.

Regards,

Ashutosh Shukla

[Former Member]

Hi Ashutosh

Thanks for reply. Already implemented SSL on java system. But HTTP is not wokring after implement.If i disable ssl parameters then am able to login thru HTTP.

Its old verion guide.No more sdm in netwevaer CE 7.1 http://wiki.sdn.sap.com/wiki/display/EP/Configuring+the+Use+of+SSL+on+the+SAP+J2EE+Engine

Please let me know if any other solutions. Thanks

Regards,

Ashish

[Former Member]

Can you tell us what is logged under dev_icm log in work folder .

Thanks,

Dev

[Former Member]

Dear Ashish

Please refer saphelp documenation for configuring SSL (HTTPS) on Java AS:

1. Transport Layer Security on the AS Java

http://help.sap.com/saphelp_nwce711/helpdata/en/bc/2ee9a2d023d64eac961745ea2cb503/frameset.htm

2. Configuring the Use of SSL on the AS Java

http://help.sap.com/saphelp_nwce711/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

I hope this helps you.

Tapan

[Former Member]

Thanks Tapan

If i configured SSL then HTTPS working fine but HTTP url is not working.

Our requirement ..we need both urls for different-2 components.

Please let me know ...is it possible or not? If possible then how it's possible?

Regards,

Ashish

[Former Member]

ICM parameter is responsible for keeping http port active , could you please check this in your system.

icm/server_port_<No> = PROT=HTTP, PORT=5<inst_no.>00, TIMEOUT=60

[Former Member]

SSL parameter maintain -

ssl/ssl_lib = $(DIR_EXECUTABLE)\sapcrypto.dll

sec/libsapsecu = $(DIR_EXECUTABLE)\sapcrypto.dll

ssf/ssfapi_lib = $(DIR_EXECUTABLE)\sapcrypto.dll

ssf/name = SAPSECULIB

icm/server_port_0 = PROT=HTTPS,PORT=5$(SAPSYSTEM 00,TIMEOUT=600,PROCTIMEOUT=3600

icm/HTTPS/verify_client = 0

[Former Member]

Above parameters looks fine for SSL but am not able to find icm/server_port_<x> for http.

In MMC -> goto Access points check if you are able to see Http port ?

Would suggest to check dev_icm log and let us know the error.

[Former Member]

dev_icm logs -

[Thr 4176] Tue Oct 23 12:42:07 2012

[Thr 4176] *** WARNING => IcmNetCheck: NiAddrToHost(10.0.0.1) took 5 seconds [icxxman.c    5939]

[Thr 4176] *** WARNING => IcmNetCheck: 1 possible network problems detected - please check the network/DNS settings [icxxman.c    5995]

[Thr 7120] Tue Oct 23 12:42:22 2012

[Thr 7120] JNCMIHttpMsPutLogon: delete http logon information

[Thr 7120] JNCMIHttpMsPutLogon: delete https logon information

[Thr 7120] JNCMIP4MsPutLogon: p4 port information not available

[Thr 7120] JNCMIIIOPMsPutLogon: reset iiop logon information

[Thr 7120] JNCMITelnetMsPutLogon: reset telnet logon information

[Thr 7120] JNCMIHttpMsPutLogon: delete http logon information

[Thr 7120] JNCMIHttpMsPutLogon: delete https logon information

[Thr 7120] JNCMIP4MsPutLogon: p4 port information not available

[Thr 7120] JNCMIIIOPMsPutLogon: reset iiop logon information

[Thr 7120] JNCMITelnetMsPutLogon: reset telnet logon information

[Thr 7120] Tue Oct 23 12:42:52 2012

[Thr 7120] JNCMIHttpMsPutLogon: delete http logon information

[Thr 7120] JNCMIHttpMsPutLogon: delete https logon information

[Thr 7120] JNCMIP4MsPutLogon: p4 port information not available

[Thr 7120] JNCMIIIOPMsPutLogon: reset iiop logon information

[Thr 7120] JNCMITelnetMsPutLogon: reset telnet logon information

One more question

How to generate SSL certificate?

[Former Member]

Did you manage to check icm parameter for http in instance profile ?

SSL certificates can be created via NWA -> content tab -> in keystore view table -> select ICM_INSTANCE_<xxx> view and delete the entries below it and thn create the certificates.

http://help.sap.com/saphelp_nwpi711/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

[Former Member]

I have changed parameter as below but still not work -

icm/server_port_1 = PROT=HTTPS,PORT=5$(SAPSYSTEM 01,TIMEOUT=600,PROCTIMEOUT=3600

icm/HTTPS/verify_client = 0

icm/server_port_0 = PROT=HTTP,PORT=5$(SAPSYSTEM 00,TIMEOUT=600,PROCTIMEOUT=3600

[Former Member]

Well my last attempt ,

create the certificate - sign it with the CA -- restart the ssl provider service and icm and check.

If this dosent work and http works thn we should check the icm log again.

[Former Member]

I have changed the parameter.

icm/server_port_4 = PROT=HTTPS,PORT=5$(SAPSYSTEM 01,TIMEOUT=600,PROCTIMEOUT=3600

icm/server_port_0 / 1 / 2 / 3 already in use so i define

icm/server_port_4 for HTTPS. Now its work.

SSL certifcate error still occur. how to generate and register?