How to set up HTTPS with client certificate on ABAP server

[jmalla]

I have a client certificate p12 file that we need to use for HTTPs communication with an external server.

In order to load this certificate to a PSE, is the only way to do this through the sapgenpse utility?

I have uploaded the Server SSL Certificate through STRUST and the other certificates in the certificate hierarchy.  Do I also need to upload the client certificate in STRUST?

Any help is appreciated.  Is there a good reference on how to use client digital certificates on the ABAP server to communicate with external systems?

Thanks,

Jay

[tobias_winterhalter · Accepted solution]

Hi Jay,

You can import the client certificate with STRUST into the Standard Client PSE. Here is the help for the client PSE:

http://help.sap.com/saphelp_nw73/helpdata/en/49/26ada239242583e10000000a421937/content.htm?frameset=...

Regards,

Tobias

[cris_hansen]

Hello Jay,

If you have already created a PSE from your PKC#12 file using sapgenpse, then you can follow SAP note 1178155 to create a new SSL identity and save the new PSE as it (you don't need to follow all the steps, but I think the note will give you the main idea).

I hope this helps,

Cris

[Former Member]

A p12 file contains a private key along with its certificate. As you said you can use sapgenpse to convert it to PSE format, which is just a container for private keys and certificates.

sapgenpse import_p12 -p SAPSYS.pse <myfile.p12>

Then you can import the PSE file in STRUST, be aware STRUST is not very user friendly as most basis transactions. To use it for https, you have to save the pse as SSL Server and restart the icman afterwards. An important prerequisite is the installation of the SAP cryptolib, otherwise you won't see the entries in STRUST at all.

Cheers Michael

[Former Member]

Hi Jay,

Here is a good document for  "Configuring the SAP Web AS for Supporting SSL"

http://help.sap.com/saphelp_nw70/helpdata/en/65/6a563cef658a06e10000000a11405a/frameset.htm

Regards, KK