topic Re: SSL with cl_http_client in Application Development and Automation Discussions

SSL with cl_http_client

Former Member — Wed, 06 Mar 2013 13:19:58 GMT

Hi all, is there a way to make ssl https connection using cl_http_client class or any other class where you are not obliged to

to fill in strust manually the certificate of service provider. So SAP to behave like an standard browser which takes it automatically form server which provides the service . Or is there an class to fill strust with certificate taken from service provider in abap.

Re: SSL with cl_http_client

Former Member — Wed, 06 Mar 2013 17:12:50 GMT

No, you will have to setup STRUST. Otherwise the HTTP client will not be able to decrypt the SSL encrypted pages. Minimal setup of STRUST involves installing and configuring SAP Cryptographic Library (unless already done) creating PSE (unless already done) and importing of involved certificate(s) of the web site you are trying to access with HTTPS. Takes no more than 30 minutes if you know what you are doing.

Browsers also have certificates installed, it is no different from STRUST.

Re: SSL with cl_http_client

Former Member — Thu, 07 Mar 2013 08:55:57 GMT

Hi Samuli,

I already set the STRUST . The issue is that usually server certificates expires each year or each second year. And the issuer creates new certificate which have to be imported in strust manually. What I want to achieve the standard browser behaviour so if certificate is changed to be automatically added to struts and ICM to be restarted so certificate to work. Why restart is need for such operation is an other strange behaviour for me but anyway .

Re: SSL with cl_http_client

Former Member — Thu, 07 Mar 2013 14:13:14 GMT

You could take this up with SAP but as it is today, that is how it works. And yes, the certificates in your browser get automatically updated too.

Re: SSL with cl_http_client

Former Member — Thu, 07 Mar 2013 14:32:49 GMT

Thank you Samuli. It is shame that we have to make it manually .

Re: SSL with cl_http_client

Former Member — Thu, 07 Mar 2013 16:59:33 GMT

If you can automatically download the certificate(s), you could use sapgenpse(.exe) to automatically insert them into STRUST. Just write a script and schedule it.

Re: SSL with cl_http_client

Former Member — Fri, 08 Mar 2013 07:41:29 GMT

So I have to create RFC FM to download certificate on application server run sapgenpse and than restart ICM somehow ?