topic Re: encrypt file on application server in Application Development and Automation Discussions

encrypt file on application server

Former Member — Fri, 15 Sep 2006 06:31:11 GMT

Hello,

we have several programs/transactions, which write plain text files in the filesystem of the application server. These files are transferred afterwards via ftp etc.

Now we want to encrypt these files with public key of the receiver before they leave the operating system. Is there a simple way to do this with SSF?

Thanks in advance for any input.

Richard

Re: encrypt file on application server

Wolfgang_Janzen — Fri, 15 Sep 2006 07:04:09 GMT

A similiar requirement was imposed by the German tax law (=> http://www.elster.de): encrypted transmission of (tax) data.

But: due to German export control regulations SAP is not permitted to ship cryptographic software with its products. However, once you've "promised" to comply with those regulations (=> you need to contact the SAP contract department via your local subsidiary) you will be enabled to download the SAPCRYPTOLIB (without any extra charges).

The SAPSECULIB (part of the shipment) allows only "harmless" cryptographic operations, such as digital signatures.

The SAPCRYPTOLIB (subject of export control, see above) offers a superset of functionality (compared with SAPSECULIB), particularly the capability to encrypt data.

The challenging part is the (public) key management. If you only have one single intended recipient (like in the ELSTER scnenario) the configuration is comparably simple. However if you have many potential recipients you need a more sophisticated PKI.

Regards, Wolfgang

Re: encrypt file on application server

Frank_Buchholz — Mon, 18 Sep 2006 07:39:13 GMT

A simple way to encrypt files? Well, after solving the organizations aspects (getting the crypto toolkit, key exchange, SSF configuration) as described in Wolfgangs reply, you can use the SSF API to encrypt the data which you then store into the files. Use function SSF_KRN_ENVELOPE as described in the Online Documentation

<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/4d/bf6f77a2c5446a86e0152f1b309db6/frameset.htm">Secure Store and Forward Mechanism (SSF)</a>

and the

<a href="https://service.sap.com/~sapdownload/011000358700003611992003E/SSFProgrammersGuide.pdf">Secure Storage and Forward (SSF) Programmers’ Guide</a>

Kind Regards

Frank Buchholz

Re: encrypt file on application server

Former Member — Mon, 18 Sep 2006 08:06:55 GMT

Look at program "SSF02". There is encryption of files implemented. You could use this for your basis of development.

Please be aware to export your files in UTF-8 !!! That prevents a lot of trouble when transferring files afterwards

Re: encrypt file on application server

Former Member — Tue, 26 Dec 2006 12:17:56 GMT

Thanks for the tip about SSF02, Mumba Hasa!

Re: encrypt file on application server

Former Member — Thu, 23 Jul 2015 09:57:19 GMT

have any one worked on this in the recent times, I got a requirement to encrypt a interface file generated by a custom program before downloading it to the application server. Similarly need to

DE-crypt a file before we load it to SAP.

Please suggest a way to do this