How to activate TLS1.2 on SAP PO7.4(Single Stack)

[shaik_shamshuddin]

Hi ALL,

We have integration with a cloud Web system which accepts only connection through TLS1.2. We configured REST adapter to communicate. But as a default SAP PO 7.4 supports till TLS1.1. Can any please guide how to connect with the cloud system by using TLS1.2

I have gone through the SAP Note  2284059. If we apply this, Will this have any impact on the other system's connectivity who uses SSL for the connectivity?

Regards,

Shaik

[Harish · Accepted solution]

Hi Shaik,

Please check the below blog

Outbound support for TLS 1.1/1.2 | SCN

regards,

Harish

[shaik_shamshuddin · Accepted solution]

Hi Harish,

Thank you for your reply. These also talking about to implement the note "2284059".

I want to know if we implement this note will it effect the other system's connectivity who uses SSL for the connectivity?

Regards,

Shaik

[bhavesh_kantilal · Accepted solution]

Shaik,

It is important to go through the blog Harish has mentioned and its comments section, especially the blog Markus.

If you do read through this blog,

• what you will realise is - every SSL/ TLS connection has to be tested in your QA environment. By default, this note would demand that your Servers present TLS 1.2 and it could be the case where this is not the case.
• If needed you would need to set up a Config File as described in the blog for the IAIK and then enables max and minimum TLS versions to make sure that servers that do not support 1.2 continue to be supported by PI by enabling the lower versions of SSL / TLS.

Regards

Bhavesh

[former_member607171]

Hi Shaik,

Can you please brief how you got the solution finally?

[shaik_shamshuddin]

Hi All,

Thank you for the suggestions.  Finally the issue got resolved.One point is that, If we implement the note 2284059 or if we do any manual changes in IAIK, The REST adapter ignores these settings and try connecting through TLS1.0 or 1.1

Regards,

Shaik

[jmejia1]

Hi Shaik,

Please share the workaround. We have exactly the same scenario.

Regards,

J

[shaik_shamshuddin]

Hi All,

We have implemented the note "2284059". But still facing the same issue in the REST Receiver Channel. Checked with certificates, Firewall settings too. Everything looks fine. Can anyone please check on this.

Regards,

Shaik

[bhavesh_kantilal]

suggest you test this with xpi_inspector and see what happens. In xpi_inpsector there is an option to test a SSL connection. The logs here will add more insight into what could be going wrong.

[Former Member]

Hello Shaik,
please provide the scenario you have, but I feel that SAP Note 2092630 will help you

Regards,
Vadym

[shaik_shamshuddin]

Hi Bhavesh,

Thank you for your suggestion Do we need to do any manual configuration after installing the note "2284059" to connect using TLS1.2?

Regards,

Shaik

[Eoin_Kierans]

Hello Shaik,

In addition to the information provided earlier you may also want to check the following note:
2295870 - TLSv1.2 Support in REST adapter.

Regards

Eoin

[Former Member]

Hello Shaik,
please have a look on valuable answer from Bhavesh. I just would like to add a remark about possibility to set the supported SSL/TLS version using parameters

client.minProtocolVersion (default: TLS1.0)

client.maxProtocolVersion (default: TLS1.2)

Supported values are: SSL30, TLS10, TLS11, TLS12

So, I suppose that you still will be able to support the legacy with earlier versions.

Best regards,
Vadym