cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

SSL Enablement on ABAP/ JAVA

Former Member
0 Likes
389

All,

I am not sure if this is the correct forum -

We are on PI 7.1 EHP1. SSL has to be enabled on this server.

As per Note 510007 (and also - http://help.sap.com/saphelp_nwpi711/helpdata/en/49/23501ebf5a1902e10000000a42189c/frameset.htm)

all the steps have been performed.

1. Install the SAP Cryptographic Library on the application server.

2. Set the profile parameters.

3. Create and maintain the SSL Server PSEs as follows:

a.Create the SSL server PSEs.

b.Generate a certificate request for each SSL server PSE.

c.Send the certificate requests to a CA to be signed.

d.Import the certificate request responses into the server's SSL server PSEs.

e.Maintain the SSL server PSE's certificate list.

We have done this on ABAP stack using - STRUST.

I have tested the https url - and is working.

Question:

1. Where in the configuration - are we telling to use SSL port (say - 50001) against a keypair.

When I am looking at the following doc (NW04):

http://help.sap.com/saphelp_nw04/helpdata/en/a6/98f73dbc570302e10000000a114084/frameset.htm

I see a step - "Assigning the Key Pair to Use for a Specific SSL Port".

View Entire Topic
baskar_gopalakrishnan2
Active Contributor
0 Likes

You can do either in STRUST TC in Abap stack or in the java stack.

>1. Where in the configuration - are we telling to use SSL port (say - 50001) against a keypair.

I believe the notes talk about java stack.

Go to Netweaver Administration in RWB --> configuration management -->certificates and keys

Former Member
0 Likes

Gopal,

I did not find it "certificates and keys". Could you please help me.

I am looking for the step where it would say - use this keypair for the HTTPS port 50001.

And another question would be -

The public key certificate that is signed and imported in this process has to be exchanged with the business partners - right - Am I correct?

Help is greatly appreciated.

baskar_gopalakrishnan2
Active Contributor
0 Likes

Login to NWA and do the mentioned steps.

>The public key certificate that is signed and imported in this process has to be exchanged with the business partners - right - Am I correct?

Yes.