topic Re: Authentification with X.509 on SAP NW Java in Application Development and Automation Discussions

Authentification with X.509 on SAP NW Java

Former Member — Fri, 25 May 2012 13:47:39 GMT

Hi experts,

A Certificate RootAuthority delivers X.509 to our users.

We want to have authentification using those X.509 on SAP NW Java. Does SAP Java able to check certificate validity in RootAuthority Server ? Does it come out of box, or do we need additionnal library ?

Thanks for your help,

Re: Authentification with X.509 on SAP NW Java

mvoros — Fri, 25 May 2012 21:20:49 GMT

Hi,

it should work out of the box. Check SAP doco for more info.

http://help.sap.com/saphelp_nw72/helpdata/en/4a/41f432343f2ab1e10000000a42189c/content.htm

Cheers

Re: Authentification with X.509 on SAP NW Java

Former Member — Tue, 29 May 2012 07:53:43 GMT

Hi Martin,

Thanks for your quick answer. I will be more precise in my question :

User certificate is compare to CA root authority certificate stored in PSE file (no direct request) ?

For Certificate Revocation, there is no way to send a request to CA ? The only way is to include ACL file on Java server ?

Thanks,

Re: Authentification with X.509 on SAP NW Java

mvoros — Tue, 29 May 2012 10:37:38 GMT

Hi,

not sure if I understand your first question but the system needs to trust to certificate that is used to sign certificates for users. The certificate (chain of certificates) is stored in PSE. There is no call to CA to verify cert.

CRL file can be downloaded to application server to improve performance. In this case you have to update CRL by yourself. Java AS can also request CRL from CA. Hence the answer for you second question is no. You can have online request. More info.

Cheers

Re: Authentification with X.509 on SAP NW Java

Former Member — Wed, 06 Jun 2012 09:53:44 GMT

thanks Martin for your answer. It helps.