wdisp/ssl_certhost for multiple systems

[Former Member]

Hi All,

I've just set up my web dispatcher to point to 2 diferent systems. Both of these systems have multiple app servers.

My question is: on the web dispatcher how do I set the wdisp/ssl_certhost parameter for both of these systems?

The 1st system is an ERP system, aaa.mydomain.com the 2nd is a BW system bbb.mydomain.com.

I have incoming SSL terminating on the webdispatcher then re-encrypting to the back end.

Thanks for any help.

[Reagan · Accepted solution]

Good Day Doug

Please check this discussion to see whether it helps you.

http://scn.sap.com/message/8337749

Cheers

RB

[Former Member]

Thanks all. Very helpful.

[Former Member]

Nobody at all?

[Former Member]

Hi,

This parameter is only relevant if you have configured a connection with SSL, that is, either the connection to the message server (wdisp/server_info_protocol = https), to the application servers (wdisp/group_info_protocol=https or wdisp/url_map_protocol=https. Compare Metadata Exchange Using SSL), or the parameter is relevant for SSL termination (wdisp/ssl_encrypt = 1 or 2). For more information see SAP Web Dispatcher and SSL.

If wdisp/ssl_certhost is not defined, for each application server a server certificate must be set up on the relevant host.

In this parameter you can specify a host on which the server certificate is issued. Then you do not have to provide a certificate for each application server.                                 

Your server certificate is issued on the name "www.sap.com". You activate this certificate for all application servers in transaction STRUST.You also set the value of wdisp/ssl_certhost to www.sap.com.

If this parameter is not set, the host names on the message server (transaction SMLG) and the names the certificates are issued with must be the same.

Thanks and Regards,

Vimal

[Former Member]

Hi,

Thanks for the reply. I also saw this text, however it does not specify if the parameter is to be set in the web dispatchers config or in the profile of the backend ERP/BI systems.

[Former Member]

Hi

  As far as I know, you need to set it in profile of ERP or BI system.

Please have a check on the below links that might give you more information.

http://scn.sap.com/message/8337749

http://www.qnasap.com/webdispatcher-to-load-balance-enterprise-portal-with-multiple-instances/

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/60b1edfb-2a5c-2d10-2294-d1777056c...

http://basisondemand.com/Documents/EndToEnd_SSL_Setup_For_WebDispatcher.pdf

I hope it helps.

Thanks and Regards,

Vimal