HTTPS - setup of certificates

[Former Member]

Hi all,

we setup the system for https use with tha SAP documentation:

http://help.sap.com/saphelp_nw04/helpdata/en/16/1bb23bdb0d0156e10000000a11402f/frameset.htm

But after i create the SSL server certificate and import the response file, and the root certification we receive always the popup to install the certificate manuel.

If i open the certificate in the popoup, we see that the found not the correct issuer of the certificate. If i try to

use the "import Cert. Response" in the transaction STRUST i get the error -> CA certificate is missing in database.

Can you help we with the setup?

Kind regards

Markus

[Former Member]

Hi all,

the solution was to export the certificate in the portal to pksc12 format and afterwards import this new file wit sapgenpse into the ABAP backend system.

regards

Markus

[Former Member]

solved

Message was edited by:

Markus Ruf

[Former Member]

> Hi all,

>

> we setup the system for https use with tha SAP

> documentation:

>

> http://help.sap.com/saphelp_nw04/helpdata/en/16/1bb23b

> db0d0156e10000000a11402f/frameset.htm

>

> But after i create the SSL server certificate and

> import the response file, and the root certification

> we receive always the popup to install the

> certificate manuel.

>

> If i open the certificate in the popoup, we see that

> the found not the correct issuer of the certificate.

> If i try to

> se the "import Cert. Response" in the transaction

> STRUST i get the error -> CA certificate is missing

> in database.

>

> Can you help we with the setup?

>

> Kind regards

> Markus

Sounds like you need to add your Trusted CA certificate into your response key.

Depends on how your Certificate Path is like, and how your certificate response is created. You may need to append your trusted CA certs in reverse order on your response file before importing.

For example if your Certificate Path is like

Equifax

|__ Path1

|__ Path 2

|__ My server Cert

Then you need to append the certs all in 1 response file in the reverse order (base64 format)

My Server Cert

|__Path 2

|__ Path 1

|__ Equifax

then import it in via STRUSTSSO2.

Why it does it in reverse, I don't really know.

And restart ICM.

Also add the Trusted CA certificates in your strustsso2 certificate list.

Hopefully that helps and not confuses you even more.

regards,

Laurence...

-

---

disclaimer:

The content of this message is my personal opinion only and, the statements I make here in no way represent my employer's position on the issue, nor am I authorized to speak on behalf of my employer on this matter.