Information regarding encryption.

[Former Member]

Hi all,

We have some scenarios where we have to send data and recieve data from BANK

We need to encrypt and decrypt the data.We wont be using Java to encrypt and decrypt the data.We are using external software PGP command line to do this stuff.

I want to know how we can achieve this using XI.

We are thinking of below scenario.

step 1 We recieve encrypted data in XI through File adapter.

step 2 We are not decrypting data in xi but sending it to some drive or in application server of R/3 using File adpter and executing some batch coomand which will invoke the script for software PGP command line .

Is this scenario possible or we need to do something else to make this scenario work.

Plz share your experience for using external software to encrypt and decrypt the data using XI.

Thanx.

Rekha.

[Former Member · Accepted solution]

Rekha,

Why don't u try PGP Java API

You can download it from..

http://www.cryptography.ch/projects/pgpjava/pgpjava-2.0.zip

API Docs..

http://www.cryptography.ch/projects/pgpjava/PGPi.html

You can simply import the jar and start using in functions in mapping or invoke as a command line in "OS Command" option in File Adapter (as you said about the batch file).

Best Regards,

Felix

[Former Member · Accepted solution]

Priyanka,Felix

Thanx for your reply.

Felix,

Can you explain steps briefly how to achieve this by invoking as command line.

Do we have to hardcode the keys if we do it by importing PGP java api.

Our client will be genarating differnt keys from time to time and they want to maintain those keys.

Will this approach also work for the above scenario?

Thanx

Rekha.

[Former Member · Accepted solution]

Rekha,

You can even use the pre-exisiting batch file or build a custom java program using PGP java api which can give a XML output that can be picked up by the FileAdapter of XI.

You don't need to hard-code the keys.. Let the java program which uses PGP java api, read the keys from a settings file or some properties file where you can change keys as and when it needs!

Take a look at the forum post for more info.

But be careful to note that, OS command will activate only after successful reading by sender adapter, which is actually of no usage in this context.

You don't have to use OS command at all if you plan to use only PGP java api hence u can write java objects using those APIs, make them as jar & import and call them from functions in mapping! - which seems to me reasonabily much easier & simpler. Hence you can have a dummy file name with keys and the filename to read which is actually processed in mapping to get the final output.

Best regards,

Felix

[Former Member · Accepted solution]

Hi felix,

Thanx for the response.

Our client is not comfortable with this approach.We will be using PGP command line software for this.

Do we have to use OS command to decrypt the code in sender adapter or reciever adapter.?

Thanx.

Rekha.

[Former Member · Accepted solution]

Rekha,

It is better to use it on receiver channel because, if you use it on sender channel, OS command will execute only after successful processing of the file which is of no use to us in this context. But in receiver channel, OS command will execute after creating the file, which can be used to decrypt it from command line!

Regards,

Felix

[Former Member · Accepted solution]

Hi Rekha/Felix,

We are doing similar kind of scenario, but sending encrypted file from XI to bank FTP server. We are using PGP batch command to encrypt the file that SAP created and move it to a encryptred folder. XI sender file adapter polls encrypted file from that folder and by using receiver FTP adapter we are FTPing to bank. We are gettign errors while FTPing it to bank in Adapter framework. Do we need to use Command line parameter in sneder/receiver adapters???? Are we doing it right? or Is there any other way of achieving the same?

Thanks&Regards

Navin

[Former Member]

HI Rekha,

TRy hte blog by Sridar :

Digital signature in XI

/people/sap.user72/blog/2005/06/16/using-digital-signatures-in-xi

But this uses java based Crypto toolkit......so donno whether this is what you are looking at.

Regards

Priyanka