encryption/decryption using GnuPG

[Former Member]

Hi,

We need to build 2 interfaces(outbound and inbound) between SAP ECC and Third party system using SAP PI 7.1

Scenario is file to file transfer between PI and third party system.

Third party s/m is using GnuPG tool for encryption and decryption.

We would like to know below details for SAP Outbound interface

1. We have to encrypt the file and send to third party system using PGPEncryption module. Is it mandatory to have algorithm from third party s/m to achieve encryption? Third party system is not aware of these algorithms

2. PGPEncryption module will take care of encryption in file receiver channel right? Please confirm

3. How to create private keys? Do we need to use any tool for creating private keys?

Thanks and Regards

Suma

[Harish · Accepted solution]

Hi Suma,

You can use PGP module with File adapter.

1. We have to encrypt the file and send to third party system using PGPEncryption module. Is it mandatory to have algorithm from third party s/m to achieve encryption? Third party system is not aware of these algorithms

--> you need to know the algorithm of encryption.

2. PGPEncryption module will take care of encryption in file receiver channel right? Please confirm

Yes it can take care. Please refer below links

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/307deff5-a5ed-2e10-e3b2-96770ee3a...

3. How to create private keys? Do we need to use any tool for creating private keys?

Pleaes refere the below blog

Regards,

Harish

[Former Member · Accepted solution]

Thanks Harish.

I am not clear with generating keys. Please provide more details regarding generating keys.

Thank you...

Suma

[Former Member]

Hi Suma,

Yes , you can select an Algorithm while creating the private/public key pair. In PGP this gets stored in the pubrings/secrings files.

Yes, PGP module will take care of encrypting the message when it reaches the receiver adapter channel

You can use this opensource tool for all your PGP related activities which is creating, testing, listing keys in your landscape. The GNU Privacy Guard

Hope this helped, thanks

[Former Member]

To 1...

you don't need to specifically choose an algorithm for encryption.

GnuPG knows about all algorithms that are used in the PGP implementation of the SAP module and will automatically choose the matching algorithm during decryption of the file.

To 2...

Yes, you configure the module in the receiver module configuration.

To 3...

For generating the public-/private key files you can use this blog...

Generating ASCII Armored PGP Key Pairs - Process Integration - SCN Wiki

But if you don't use the functionality of singing the file you don't really need your key for encryption, but the partners public key.

I.e.: you send encrypted files --> you use your partners public key for encryption

you receive encrypted files --> you use your own private key for decryption after you've send your private key to your partner (for encryption).

Best regards,

Peter