SAP PI connectivity towards OpenText/GSX (TLS)

[JuanDK78]

In connection to POODLE vulnerability of SSL, OpenText/GXS is pushing for their partner to change to TLS and disable SSL for connections to they managed services.

OpenText’s Response to the POODLE vulnerability

So far, I have not been able to identified any SAP Note or documentation which indicates that SAP PI 7.1 to 7.3 will be able to used TLS in any other protocol than FTPS.

How are you or your customer connecting to OpenText/GXS using SAP PI or PO?

[engswee]

Hi Juan

I read the OpenText link you provided and it says they will be moving to TLS 1.0. In my blog post that Raghuraman provided above, I have mentioned that TLS 1.0 is supported by the SAP Java Cryptographic Toolkit for outbound connections on Java adapters. Only TLS 1.1 and 1.2 is not supported yet.

Is there something else that you are looking for or expecting?

Regards

Eng Swee

[former_member185326]

Hello Juan,

SAP has provided TLS support in the latest SAP Cryptographic library. You may implement latest patches of crypto lib. If you are using Seeburger AS2, Seeburger 2.2.1 is the release that supports TLS.

Check 2110020 - Enabling TLS or disabling SSLv3 protocol versions on SAP WebDispatcher, or SAP WebAS

For RNIF check: 2230208 Signing Algorithms supported by RNIF adapter

Regards,

Shahid

[iaki_vila]

Hi Juan Francisco,

I think you last chance is to develop your own adapter/java mapping to do this connectivity, with the problem that in PI 7.1 or PI 7.3 the jvm doesn't support TLS 1.1 or 1.2. You can try working with Bouncy Castle jars.

Regards.

[former_member186851]

Hello Juan,

Guess you can connect to GXS using FTP Protocol.

[JuanDK78]

No because GXS integration flows comprehend of all the following protocols:

[former_member186851]

Hello Juan,

check the official Link,Guess FTP is possible

OpenText GXS SAP Integration

[JuanDK78]

You are missing the point.

Is you have connection runnint on AS2, HTTP, RosettaNet or other protocol, it will not have architectual sense to jump backto FTPS.

[former_member186851]

Ok..Then you can use HTTP for TSL.

Check the below link

[JuanDK78]

You did not read the whole thread you pasted.

That is not possible yet.