Sender REST-Adapter: Configure SSL and client certificate authentication

[stuerzea]

Hi experts,

we would like to offer REST-Interfaces with SSL encryption and client certificates as authentication method via SAP PO.

I have read SAP note 2032220 - New Feature : REST Adapter for Advanced Adapter Engine.

It says that the adapter offers features for:

• Basic and client certification based authentication
• SSL over http

I can't find any of these settings in sender REST Apapter. 

Could you please guide me.

Thanks in advance.

Regards,

Andreas

[stuerzea · Accepted solution]

I thought there is an additional configuration needed (like SOAP-Sender-Adapter).

But I figured out that it works without any Adapter-Config if SSL and client-certificate request is configured properly in SAP PO NWA.

Thanks for your input.

Andreas

[Former Member · Accepted solution]

Hi Andreas,

I have the very much same requirement to expose REST Services over HTTPS from SAP PO 7.4.

Can you please share the details what all settings or configuration it requires in NWA?

[stuerzea · Accepted solution]

Hi Anshul,

our basis team configured SSL for the SAP PO Systems.

Please have a look at this blog post https://scn.sap.com/thread/3236364.

Afterwards we had to setup usage of client certificates as described here http://scn.sap.com/community/pi-and-soa-middleware/blog/2013/09/20/sender-soap-adapter-https-with-cl...

Regards,

Andreas

[joel_langoyan]

Hi,

I have same requirement. I followed the steps in the blog as you mentioned and had the certificate of the sending application into its dedicated user as well in TrustedCA. Did you do changes on server level as stated in note 2902687? Please help.

[WandersonSantos]

@andreas.stuerzerer

Good morning, I have a development scenario similar to yours, but my intarface needs to be Best Effort, could you help?

[Former Member]

Thanks Andreas. I need to investigate more to have basis on-board to achieve this.

[former_member182412]

Hi Andreas,

You need to select the message protocol REST Polling then you can see Client Certificate Authentication option in General Tab. Configuring the Sender REST Adapter with Polling - Advanced Adapter Engine - SAP Library

Define Transport Level Security
For TLS/SSL-enabled endpoint authentication using X.509, you can configure certificates: If the server requests a certificate from the client, activate Use Client Certificates and specify the name of the key store inKey Store View and the certificate alias in Key Store Entry

Regards,

Praveen.

[stuerzea]

Hi Praveen,

my scenario is not REST-Polling. I would like to offer a REST-Interface on SAP PO which could be called by a third party application.

For security I would like to use SSL and the third party application should use a client certificate for authentication.

For example on SOAP-Sender channel this is quite an easy task. See my screenshot.

Therefore I'm searching for the same configuration in REST-Sender-Adapter (as described by SAP note  2032220 - New Feature : REST Adapter for Advanced Adapter Engine this should be possible)

[former_member192851]

I think you should configure SSL on SAP PI Server

And then use it from your sender system.

Check this for PI 7.3 Java How to Setup SSL in SAP PI 7.3 Java | SCN

[stuerzea]

Hi Artem,

SSL is configured on our SAP PO landscape.

I'm searching how to configure it within the Sender REST-Adapter scenario!

Regards,
Andreas