SSL with cl_http_client

[Former Member]

Hi all, is there a way to make ssl https connection using cl_http_client class or any other class where you are not obliged to

to fill in strust manually  the certificate of service provider. So SAP to behave like an standard browser which  takes it automatically form server which provides the service . Or is there an class to fill strust with certificate taken from service provider in abap.

[Former Member]

No, you will have to setup STRUST. Otherwise the HTTP client will not be able to decrypt the SSL encrypted pages. Minimal setup of STRUST involves installing and configuring SAP Cryptographic Library (unless already done) creating PSE (unless already done) and importing of involved certificate(s) of the web site you are trying to access with HTTPS. Takes no more than 30 minutes if you know what you are doing.

Browsers also have certificates installed, it is no different from STRUST.

[Former Member]

Hi Samuli,

I already set the STRUST . The issue is that usually server certificates expires each year or each second year. And the issuer creates new certificate which have to be imported in strust manually. What I want to achieve the standard browser behaviour so if certificate is changed to be automatically added to struts and ICM to be restarted so certificate to work. Why restart is need for such operation is an other strange behaviour for me but anyway .

[Former Member]

You could take this up with SAP but as it is today, that is how it works. And yes, the certificates in your browser get automatically updated too.

[Former Member]

Thank you Samuli. It is shame that we have to make it manually .

[Former Member]

If you can automatically download the certificate(s), you could use sapgenpse(.exe) to automatically insert them into STRUST. Just write a script and schedule it.

[Former Member]

So I have to create RFC  FM to download certificate on application server run sapgenpse and than restart ICM somehow ?