Error in PGP module for SFTP Receiver Channel ?

[Former Member]

Hi Experts,

As per the business scenario, i am using the SFTP Receiver adapter to send some large Data to our banker and as per the banks requiremnt the file should be digitally signed. I have tried using the PGP module available with PI. currently we are on PI 7.3.

i am getting the following error.

Transmitting the message to endpoint <local> using connection HTTP_AAE_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.lang.Exception: No private key with signing capability found in '/usr/sap/GD1/J00/sec/sonawaneug-S3.pfx'.

we are using CLASS III Digital Certificate given by CA - ncodesoluations. following are the details of the digital signature

Signature Algorithm

:

SHA256

i am attaching the scrren-shots also along with this message. pl. check.

The moduleKey which i am using in Receiver SFTP channel is 'pgp' whether i should use 'pgpenc' ?

The CA has given the .pfx file. how to use this in module parameter value. do we have to give as .txt ?

looking for your help.

Regards,

Umesh

[Former Member]

Hi All

Attaching the SFTP Reciver Channel Module View....

[former_member200386]

Hi Umesh,

You need to use your Partner Public key as well. and mention applyEncryption as true.

for your question. how check the pgp format.

open your public key. check starting and ending blocks it has to be start & stop with pgp block.

Thanks & Regards,
pavan

[Former Member]

Dear Pavan,

   As per the requirment i need to do only digital signature no Encryption. hope it is optional?

Regards,

Umesh

[Former Member]

[former_member200386]

Hi Umesh,

There is nothing to do with naming convention as .txt or .pfx. can you please check your own private key is well PGP formatted. and also check CA team that the key which you are using to applying digital signature is valid one or not.

If it's possible please share your module configuration screen shots.

Thanks & Regards,

Pavan

[Former Member]

Hi Pavan,

Can you pl. elaborate how to check my own private key as well PGP formatted. I tried installing this on my machine & checked with CA. the signature looks okay...

i will upload the screen-shots. I dont know how to do this.

one more thing which modulekey to use 'PGP' or PGPENC' ?

Regards,

Umesh

[Former Member]

Hi Pavan,

   I have attached the screen-shot pl. check.

Regards,

Umesh

[former_member194612]

Hi Umesh,

"i am attaching the scrren-shots also along with this message. pl. check."

its is missing , pls attach .its helpful if you attach your module config also.

Thanks,

satish

[Former Member]

Can Anybody help me how to attached file here. I have word document where all the scree-shots are there. I tried converting it to one of the acceptable format of JPG or jif. but it is not accepting.

file size is also less than 1 MB.

pl. help...

[Former Member]

Hi Satish,

  I have attached the screen-shot. pl. check.

Regards,

Umesh

[former_member194612]

 

Hi Umesh,

please check the link for creating the keys
and import private keys

http://wiki.sdn.sap.com/wiki/display/XI/Generating+SSH+Keys+for+SFTP+Adapters+-+Type+1

Give a Module key for the PGP
Encryption Module as ‘‘pgpenc’’ , in Module Name
‘‘localejbs/PGPEncryption’’

Hope this info will help you to solve your query.

Module   Key	Module Parameter
		Parameter Value
pgpenc
	keyRootPath	Path to the location on the PI Server where the PGP
		certificates are stored
	partnerPublicKey	<ReceiverPublicKeyName>.asc
	ownPrivateKey	<SenderPrivateKeyName>.asc
	pwdOwnPrivateKey	Passphrase for the Sender Private Key
	applyEncryption	TRUE
	encryptionAlgo	Encryption Algorithm, for example AES_128
	applySignature	TRUE
	signingAlgo	Signing Algorithm, for example MD5
	applyCompression	Compression Algorithm, for example ZIP
	format	text

[Former Member]

dear Satish,

   Can you pl. tell me why do i need to do this. I am already having the digital certificate from CA.

can you pl. explain in detail. what is thedifference between Encryption Module 'pgp' & 'pgpenc'

the PartnerPublicKey & ownPrivateKey has to be .asc.?

as i have mentioned i have .pfx file given by CA. will that not work.?

Regards,

Umesh

[Former Member]

Dear Satish,

   I tried using the EncryptionModule as 'pgpenc' instead of 'pgp' But still it is giving me the same error.

can anybody help me. I required this urgently.

Regards,

Umesh

[Former Member]

Hi Guys,

   Can any one help me... Still my problem is not getting  solved.

can anybody tell me whether PGP module of SAP takes care of certificates as per Indian Scenario.

compatible with CCA standards. IT Act of  INDIA.?

As per my understanding we are using PGP Module as Signer Tool ?

is there any limitation ?

Regards,

Umesh

[former_member200386]

HI Umesh,

By seeing at your error it seems to me that there will be problem with your private key. Please check with another set of private key.

Thanks & Regards,
Pavan