SAP CPI HTTPS Inbound with Client Certificate

[ONavas]

Hi everybody,

I try to call an Integration flow with Client Certificate.

I created a keystore in SAP Passport from my S-User.

Uploaded the Keystore to the CPI Keystore and afterwards generated and downloaded the Certificate from there.

The Certificate is selected in the Integration Flow.

My S-User has the ESBMessaging.send role and with Basic Auth it works.

For testing I call the endpoint from Postman, where No Auth is selected and I added the keystore in Postman as Authentification for the host. But the result is always this one:

"An Authentification object was not found in the SecurityContext".

So my question is: what am I doing wrong? I googled and checked the SAP blog but just found old explanations for Client Certificate with UserRole. But I want directly in the flow.

Thanks a lot for your help.

Cheers,

Adam

[ONavas]

Hi Adam,

Have you solved this issue? I have the same error with OSS certificate in Service Key, also the same error occurs if I configure directly the iflow with a certificate instead of ESBMessaging role.

I found in http log an error with http401, and at the same date/time, the in trace log I found the content of the incoming certificate. With a compares plugin in Notepad++, I confirm both are the same certificate.


I appreciate if you share your solution if you have found one.

[former_member226]

TO add to what Toushif said above, in case you are using a cloud foundary CPI then please follow https://blogs.sap.com/2019/08/14/cloud-integration-on-cf-how-to-setup-secure-http-inbound-connection...