encrypt file on application server

[Former Member]

Hello,

we have several programs/transactions, which write plain text files in the filesystem of the application server. These files are transferred afterwards via ftp etc.

Now we want to encrypt these files with public key of the receiver before they leave the operating system. Is there a simple way to do this with SSF?

Thanks in advance for any input.

Richard

[Wolfgang_Janzen]

A similiar requirement was imposed by the German tax law (=> http://www.elster.de): encrypted transmission of (tax) data.

But: due to German export control regulations SAP is not permitted to ship cryptographic software with its products. However, once you've "promised" to comply with those regulations (=> you need to contact the SAP contract department via your local subsidiary) you will be enabled to download the SAPCRYPTOLIB (without any extra charges).

The SAPSECULIB (part of the shipment) allows only "harmless" cryptographic operations, such as digital signatures.

The SAPCRYPTOLIB (subject of export control, see above) offers a superset of functionality (compared with SAPSECULIB), particularly the capability to encrypt data.

The challenging part is the (public) key management. If you only have one single intended recipient (like in the ELSTER scnenario) the configuration is comparably simple. However if you have many potential recipients you need a more sophisticated PKI.

Regards, Wolfgang

[Frank_Buchholz]

A simple way to encrypt files? Well, after solving the organizations aspects (getting the crypto toolkit, key exchange, SSF configuration) as described in Wolfgangs reply, you can use the SSF API to encrypt the data which you then store into the files. Use function SSF_KRN_ENVELOPE as described in the Online Documentation

<a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/4d/bf6f77a2c5446a86e0152f1b309db6/frameset.htm">Secure Store and Forward Mechanism (SSF)</a>

and the

<a href="https://service.sap.com/~sapdownload/011000358700003611992003E/SSFProgrammersGuide.pdf">Secure Storage and Forward (SSF) Programmers’ Guide</a>

Kind Regards

Frank Buchholz

[Former Member]

Look at program "SSF02". There is encryption of files implemented. You could use this for your basis of development.

Please be aware to export your files in UTF-8 !!! That prevents a lot of trouble when transferring files afterwards

[Former Member]

Thanks for the tip about SSF02, Mumba Hasa!

[Former Member]

have any one worked on this in the recent times, I got a requirement to encrypt a interface file generated by a custom program before downloading it to the application server. Similarly need to

DE-crypt  a file before we load it to SAP.

Please suggest a way to do this