‎2011 Nov 11 2:24 PM
Need help about using STRUST to establish https connection,
Hello everyone,
I want to get data from a secured website (e.g. https://data.example.com,
which I can access using a web browser and the releated username and password)
from ABAP.
To establish and test the connection I followed steps 1,2 and 4 of SAP Note 510007
(Setting up SSL on Web Application Server ABAP). In transaction Strust, I can
see the node 'SSL Client Data' in whose certificate list "CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE"
exists. The certificate of https://data.example.com is issued by GlobalSign. I restarted ICM several times, both
soft and hard.
After this, I created a
G-Type (HTTP Connection to External Serv) Remote Connection in transaction SM59 with the following settings:
*Technical settings:
>Target Host: data.example.com
>service No: 443
*Logon & Security:
>Logon Procedure: Basic Authentication
>SSL: Active
>SSL Client Certificate: Data (this is the name of the node in transaction Strust)
>Logon: (username and password are entered)
*Special Options:
>Http Version: HTTP 1.0
>Compression: Inactive
>Compressed Response: No
>Accept Cookies: Yes (All)
Clicking Connection Test in SM59 results with MESSAGE s000(sr), http client's receive fails.
Debugging did not help since lots of low level system calls are made (http_read_sc returns with ecode 110 ).
Neighter SDN nor help.sap.com provided a helpfull information. Has anyone dealt with the same
problem? Any help will be appreciated.
Note: Please do not reply with help.sap.com links or incomplete forum entries. I already have
read lots of them with no success.
Best regards,
Ozcan.
‎2011 Nov 13 8:50 PM
Hi again,
Problem solved, here is what I did:
*An Https service is required, go the transaction SMICM, click GoTo->Services,
*If no https service is listed, create one (port = 443),
You can check SMICM trace file in order to make sure sapcryptolib settings (profile parameters etc.) are correct:
[Thr 8700] profile param "ssl/ssl_lib" = "C:\usr\sap\...\exe\sapcrypto.dll"
resulting Filename = "C:\usr\sap\...\exe\sapcrypto.dll"
[Thr 8700] = found SAPCRYPTOLIB 5.5.5C pl26 (Mar 6 2009) MT-safe
[Thr 8700] = current UserID:xxxxx
[Thr 8700] = found SECUDIR environment variable
[Thr 8700] = using SECUDIR=C:\usr\sap\...\sec
[Thr 8700] = Success SapCryptoLib SSL ready!
[Thr 8700] =================================================