ASA HTTP connection replication question

I'm assessing the potential service impact of failing over from one ASA to another with HTTP replication disabled.
There is some concern that HTTP flows may be broken or disrupted when we failover
Surely HTTP is just an application running over TCP and the connection table is replicated by default in a stateful failover pair so I'm struggling to see how HTTP would be affected.
Is HTTP replication only relevant if you have HTTP inspection enabled and all that inspection info can be replicated?
Cheers, Dom

Hi,
From the command reference:-
"By default, the ASA does not replicate HTTP session information when Stateful Failover is enabled. Because HTTP sessions are typically short-lived, and because HTTP clients typically retry failed connection attempts, not replicating HTTP sessions increases system performance without causing serious data or connection loss. The failover replication http command enables the stateful replication of HTTP sessions in a Stateful Failover environment, but could have a negative affect on system performance."
Refer:-
http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/f1.html#pgfId-2014541
Also . HTTP inspection would not have any effect on the stateful connection replication on the failover.
I hope this answers your query. If you have any other query , please let me know.
Thanks and Regards,
Vibhor Amrodia

Similar Messages

  • Question/Concern Regarding HTTPS Connection

    Perhaps this question belongs under security; perhaps it belongs here. Regardless, here's my concern:
    I have an application running under a secure HTTPS connection, and I want and expect the secure connection to begin as soon as the login page loads. When the login page (login.jsp) loads the URL indicates that I have a secure HTTPS connection. However, I'm not seeing the lock icon that contains my certificate until after I login. Is my login screen connection secure? I'm guessing not. The security-constraint/login-config portion of my web.xml file follows. Am I missing an element? Thanks!
      <security-constraint>
        <web-resource-collection>
          <web-resource-name>Reserve</web-resource-name>
          <url-pattern>/*</url-pattern>
        </web-resource-collection>
        <auth-constraint>
          <role-name>comm</role-name>
        </auth-constraint>
      </security-constraint>
      <login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
          <form-login-page>/login.jsp</form-login-page>
          <form-error-page>/login_error.jsp</form-error-page>
        </form-login-config>
      </login-config>
      <session-config>
        <session-timeout>10</session-timeout>
      </session-config>

    Thanks for your reply, although I'm still not fully convinced I have a secure connection. My form action is only set to 'j_security_check' . It's the standard Tomcat login form.
    <form method="POST" action='j_security_check' >I also added a CONFIDENTIAL user-data-constraint element to my web.xml.
    Still no lock. A book I read suggests that I do indeed have a secure, encrypted connection. I still have my doubts. Any other thoughts/ideas are greatly appreciated. This is one I can't afford to be wrong about!
        <user-data-constraint>
          <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>   

  • Https Connection from servlets using JSSE.

    Hi all,
    Although my question is the same as the QOW for this week, there is an error "unsupported keyword EMAIL" returned when i try to establish a https connection using servlet. The error log is as follow:
    =====================================
    java.io.IOException: unsupported keyword EMAIL
    at com.sun.net.ssl.internal.ssl.AVA.<init>([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.ssl.RDN.<init>([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.ssl.X500Name.a([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.ssl.X500Name.<init>([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.www.protocol.https.HttpsClient.a([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.www.protocol.https.HttpsClient.a([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.www.protocol.https.HttpsClient.a([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnection.connect([DashoPro-V1.2-120198])
    at com.sun.net.ssl.internal.www.protocol.https.HttpsURLConnection.getInputStream([DashoPro-V1.2-120198])
    at URLReader.doGet(URLReader.java:78)
    ===================================
    Does anyone know the meaning of this error?
    I try to write a java application using the similar code and it totally works fine(i can connect to the server and obtain the page). Does JSSE support Java Servlet? Or this is the problem of tomcat server? FYI, I'm using
    Tomcat 3.2.2
    Java SDK 1.3
    Many thanks!
    Ethan
    p.s. Here is the source for my program
    import java.io.*;
    import java.net.*;
    import javax.servlet.*;
    import javax.servlet.http.*;
    import javax.net.*;
    import javax.net.ssl.*;
    import com.sun.net.ssl.*;
    public class URLReader extends HttpServlet{
    private PrintWriter out = null;
    public void doGet(HttpServletRequest req, HttpServletResponse res){
    res.setContentType("text/html");
    res.setHeader("Cache-Control", "no-cache");
    res.setHeader("Progma", "no-cache");
    out = res.getWriter();
    java.security.Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
    System.setProperty("javax.net.ssl.trustStore", "File_for_keyStore");
    System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
    try {
         URL url = new URL("https://server_name:port/index.htm");
         HttpsURLConnection urlconnection = (HttpsURLConnection)url.openConnection();
         BufferedReader in = new BufferedReader(new InputStreamReader(urlconnection.getInputStream()));
         String outputLine ;
         while ( (outputLine = in.readLine()) != null){
         out.println("There is the result: "+outputLine);
         in.close();
    catch(Exception e){
    public void doPost(HttpServletRequest req, HttpServletResponse res){
    }

    I was just having this issue, after months of error-free ssl behavior, on a new machine i was installing (Note: that I was running the IBM jdk1.3) It turns out that when I was editing the java.security file to know about JCE/JSSE providers i had the providers in the wrong order. The Error causing sequence was:
    security.provider.1=com.sun.net.ssl.internal.ssl.Provider
    security.provider.2=com.ibm.crypto.provider.IBMJCA
    # Extra provider added ibm@33894
    security.provider.3=com.ibm.crypto.provider.IBMJCE
    # extra provider i added
    security.provider.4=sun.security.provider.Sun
    The issue disappeared when i changed the order to:
    security.provider.1=sun.security.provider.Sun
    security.provider.2=com.sun.net.ssl.internal.ssl.Provider
    security.provider.3=com.ibm.crypto.provider.IBMJCA
    # Extra provider added ibm@33894
    security.provider.4=com.ibm.crypto.provider.IBMJCE
    hope that helps!
    --john molnar
    Trellis Network Security

  • How to establish an Https connection from a html client

    Hi! I�m totally new to Java so my question is rather"stupid". I have an html page that sends a post to a servlet
    <form name="form" action="servlet/ServletLogOn" method="post">
    I want to establish an https connection between the client and the servlet. How is it?
    Thanks in advance.

    Ignore the previous poster's reply - he was obviously mislead by my original post re: JSSE.
    How you install an SSL certificate on your webserver is completely dependent on the webserver you are using. Ususally there is some functionality for doing this from the administrative interface - usually involves pasting some text from the CA's (certificate authority, e.g. Verisign) site into a text box and designating a port number for SSL traffic (use 443, it's internet standard). I've actually only done this for Netscape Enterprise Server - you may want to find a forum for users of your webserver to ask for specifics.

  • Disturbing http connection from ISE to an unknown Internet address

    I have an ISE version 1.1.2.145 Patch-5 running in standalone mode.  No one has access to the ISE appliance except myself.  The ISE has an IP address of 1982.168.1.1
    today, I noticed that the ISE is attempting to make an outbound http to an unknown Internet IP address of files.liferay.com.  Fortunately, my checkpoint firewall does not allow this connection:
    Number:                          99427
    Date:                           17Nov2013
    Time:                              23:03:11
    Interface:                        eth2
    Origin:                         Corp_Firewall
    Type:                              Log
    Action:                         Drop
    Service:                          http (80)
    Source Port:                    58025
    Source:                           Corp_Firewall-192.168.1.1 (192.168.1.1)
    Destination:                    files.liferay.com (38.75.15.3)
    Protocol:                         tcp
    Rule:                           100
    Rule UID:                        {1234abcd-1111-xxxx-vvvv-aaaaaaaaaa}
    Rule Name:                    Corp_Firewall Log Drop rule
    Current Rule Number:        100-Corp_Firewall
    Product:                          Security Gateway/Management
    Product Family:              Network
    Policy Info:                     Policy Name: Corp_Firewall
                                    Created at: Sat Nov 16 01:30:50 2013
                                    Installed from: corp-mgmt-192.168.1.2
    The question is why the ISE is doing this?  What is the purpose for this http connection, some kind of "back door" by Cisco?

    Liferay is an open source web portal for hosting cloud applications.  This is definitely NOT a Cisco back-door to the ISE.
    About Us
    Enterprise. Open Source. For Life.
    Enterprise.
    Liferay, Inc. was founded in 2004 in response to growing demand for  Liferay Portal, the market's leading independent portal product that was  garnering industry acclaim and adoption across the world. Today,  Liferay, Inc. houses a professional services group that provides  training, consulting and enterprise support services to our clientele in  the Americas, EMEA, and Asia Pacific. It also houses a core development  team that steers product development.
    Open Source.
    Liferay Portal was, in fact, created in 2000 and boasts a rich open  source heritage that offers organizations a level of innovation and  flexibility unrivaled in the industry. Thanks to a decade of ongoing  collaboration with its active and mature open source community,  Liferay's product development is the result of direct input from users  with representation from all industries and organizational roles. It is  for this reason, that organizations turn to Liferay technology for  exceptional user experience, UI, and both technological and business  flexibility.
    For Life.
    Liferay, Inc. was founded for a purpose greater than revenue and profit  growth. Each quarter we donate to a number of worthy causes decided  upon by our own employees. In the past we have made financial  contributions toward AIDS relief and the Sudan refugee crisis through  well-respected organizations such as Samaritan's Purse and World Vision.  This desire to impact the world community is the heart of our company,  and ultimately the reason why we exist.
    You may want to investigate the applications being used on site.
    Hopefully this helps. 
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Help! with creating a J2ME program using the http connectivity interface

    So this is what I have to do using the http connectivity interface:
    1.Creating two threads – one for communication (receiving and sending) and the other (main) thread will be for interaction with the user.
    2.The main thread will make use of three midlet forms. The first form will ask for web page address (URL) and separately for a delimiter which will separate the words in the URL document, the third form will display the ratio of all symbols on the page and the number of occurrences of the delimiter specified
    3.The second thread should perform http connectivity to the WWW, utilise the web page address supplied and connect to the appropriate web page and read its content, count all symbols on the chosen page, count the number of occurrences of the delimiter given as user input on the same form as the web page address, calculate the ratio between the two and pass this information to the first thread to display.
    I have many questions but my main concerns are:
    *1. How to communicate using HTTP interface within a thread*
    *2. What is a delimiter in the context above and how should it be implemented*
    I've been thrown in at the deep end with little programming experience with this assignment. If anyone can share a similar example or answer my concerns I'd be more than happy.
    Thanks in advance.

    thelane wrote:
    hi thanks for the response.
    As I said I have coded in other languages before, but this is a new for me in java. I needed to get it working quickley. Now I can clean up.
    I will have a look at method and see how I get on.
    ANy similiar examples would be great.
    Thanks.I can certainly give you a similar example.
    Say you have code such as this:
      int a = 10, b = 11;
      int temp = 1;
      for(int i = 2; i < a; ++i) {
       temp *= i;
      System.out.println(a + " factorial is " + temp);
      temp = 1;
      for(int i = 2; i < b; ++i) {
       temp *= i;
      System.out.println(b + " factorial is " + temp);Each section of code takes the factorial of the current variable an outputs it. The factorial code can be placed within a method to be called more easily, as such:
    public void factorial(int num) {
    int temp = 1;
    for(int i = 2; i < num; ++i) {
      temp *= i
    System.out.println(num + " factorial is " + temp);
    }Then, whenever you need to call it, you can just do so:
    int a=10,b=11,c=12;
    factorial(a);
    factorial(b);
    factorial(c);

  • Weblogic 10.3: web service client enable HTTP/HTTPS connection reuse?

    hi all,
    i am writing an client app to call a web service, through a client proxy generated by jdeveloper/weblogic.
    My question is:
    for the weblogic web service client proxy, is it possible to enable HTTP/HTTPS connection reuse/pooling?
    i see there is many connection created when calling the web service (by command netstat)?
    thank you.
    lsp

    anybody can help?
    thanks

  • To Akash :  Http Connection problem

    Dear Akash,
    Thanks for the reply u gave for my question
    I tried with Thread also.
    I still have few doubts & problem.
    1. Do we need to get special permission from
    operators for uploading the images or text to server.
    I have tried to upload captured images to my server.
    But i cann't do with mobile.
    2. I am also trying to audio, video streaming. All
    these are working with emulator. But not with mobile.
    3. Is there are any proceedure to deploy them. I am
    using EclipseME plugin. After creating jar files of my
    application using obsfucation package, i am just
    copying to my server and downloading it from mobile.
    Is it correct way?
    Can you please answer me asap? BCoz, I am stuck with
    this project for last 1 week. Nothing seems to be
    working on mobile.
    FYI ( i am using nokia 6600). I have harcoded the
    ipaddress of my server for http connection instead of
    using domain name. Is it cerating problem.
    Thanks a lot in advance.
    Prasanna

    hi
    i mailed u today from my personal emailid , i think u got it .
    reply me if u still have some problem.
    thanks for writing me email also my name in subject line , it really save my time
    regards
    akash
    Indiagames ltd
    India
    [email protected]

  • Ensure image loaded via http connection

    hi all
    I have a midlet that will load various images and displaying them on a canvas, upon request from the sever via HTTP connection.
    And since the operation are being performed via the commands, the http connection code had been placed in another thread.
    My question is, how can I ensure that all the necessary images are being loaded before moving on to execute the next code segment in my midlet?

    When i try to send the server its unable to recieve image data . it was able to recieve request data.
    As we use the same procedure to send data(irrespective of form as i m sending bytes)
    Here is the code snippet
    private boolean OpenHTTPConnection(String xmlData, String strUrl, String strRequestType) {
            System.out.println("UUURRRRLLL ->" + strUrl);
            System.out.println("XML Data---> ->" + xmlData + "'''''''" + bHTTPStatus);
            int rc, height, width;
            byte[] data;
            byte[] imageData = null;
            InputStream iStrm = null;
            try {
                if (xmlData != null) {
                    con = (HttpConnection) Connector.open(strUrl, Connector.READ_WRITE, false);
                    con.setRequestMethod(HttpConnection.POST);
                    data = xmlData.getBytes();
                    System.out.println("1->" + data);
                    OutputStream ops = con.openOutputStream();
                    System.out.println("----data length---" + data.length);
                  ops.write(data);
       if (Snapper.isUpload == true) {
    ops.write(Snapper.raw,0,Snapper.raw.length);
                    rc = con.getResponseCode();
                    if (rc != HttpConnection.HTTP_OK) {
                        result.setText("Server is not ready...");
                    if (ops != null) {
                        ops.close();
                    xmlData = null;
                    imageData = null;
                    Snapper.isUpload = false;
                }// end of null check
                else {
                    System.out.println("Open the Con using this URL--->" + strUrl);
                    // open the specific photo for View module
                    con = (HttpConnection) Connector.open(strUrl);
                    con.setRequestMethod(HttpConnection.GET);
                strParameters = null;
            } catch (Exception e) {
                System.out.println("Exception------->" + e);
                e.printStackTrace();
                midlet.uiManeger.SetLastErrorCode(Parser.NO_NETWORK);
            return true;
        }

  • Where's the secure HTTP connection symbol? It used to be at the bottom right corner whenever there was a secure website connection

    Whenever I made connection with a secure website, the HTTPS secure symbol would show up at the bottom right corner, indicating how strong the https connection was. Sometimes it would be a solid symbol; other times when the website wasn't as secure, it would show up with a line through it. Simple question, but I don't see it anymore and it is helpful to know how strong the security is on certain websites.
    Thank you.

    In Firefox 4 you no longer have the Status bar that showed the padlock in previous Firefox versions.
    You can click the "Site Identity Button" on the left end of the location bar to see the padlock.<br />
    See: [[Site Identity Button]]
    A click on the "More Information" button will show details about the connection.<br />
    The background color of the "Site Identity Button" on the left end of the location bar will change color (blue or green) and show the domain in case of a secure https connection.
    * Hover the Site Identity Button then to see "Verified by xxxx"
    * Click the [[Site Identity Button]] on the left end of the location bar to see the padlock
    * Click the "More Information" button in that pop-up to see additional information about the connection.

  • Plugin opens too many Http connections

    Hi Java gurus,
    My applet sends many POST requests (10-20 per second) one by one (not concurrently) to an IIS server application, using HttpUrlConnection. When I run it with AppletViewer, I see (with netstat) a single HTTP connection which is re-used for each new POST.
    However, when I run it under IE with Plugin 1.4.0 or 1.4.1, netstat shows that each POST creates a new connection. After the response arrives, this connection goes to TIME_WAIT state for several minutes and the next POST opens a brand new connection. After some time I see hundreds of TIME_WAIT connections.
    I got an advice (from experts-exchange) to force using sun.net rather than sun.plugin, thus avoiding the apparent plugin bug. I do it as follows:
    URL.setURLStreamHandlerFactory(null);
    sysProperties.setProperty("java.protocol.handler.pkgs", "sun.net.www.protocol");
    Now a single connection is opened and re-used for all POSTs, but the applet is not aware that it runs under a plugin or browser, e.g., it doesn't recognize the IE proxy settings.
    My questions:
    1. Is this a known plugin bug? (I could not find any similar bug in Web).
    2. Are there other potential problem with my workaround?
    3. Are there other solutions to my problem?
    Thanks in advance
    Sruli Ganor

    I am facing the same problem...

  • Http connection problem on real series 40 device

    Hi guys,
    I'm having a problem with my midlet whenever it connects to a servlet through HTTP. When i access the servlet through a getResponseCode() command or through an openInputStream() command, a java.io.ioexception exception is called. I'm sure that the problem isn't with the servlet since i can access it just fine both through a browser or through the nokia emulator. The problem only happens when i use a real 7210 device to test the application. When i tested the application on a real series 60 device it worked just fine.
    I think the problem is with the security settings of series 40 phones. It seems that the midlet doesn't allow http connections. Do i need to do anything to allow http connections from a series 40 midlet? I have already set the gprs access point to internet as some posts have advised. Any help would be greatly appreciated. Thanks in advance!

    Hi guys!
    First of all, I'll introduce myself. My name is Angel and I am a spanish guy who likes this techs.
    I've been reading your answer to the question related to why http connections doesn't work on series 40 nokia mobiles. I mean about protocol used on connections among mobile-WAP Gateway... and I really have to tell you that you helped me about understanding how they actually work...
    Well, anyway, the thing is that I'm working with this sort of connection through the internet in order to request information from a servlet wich is in close realation with a Database. I launch queries SELECT,INSERT,DELETE,... against the server wich reports the results. This is part of my final year project, in order to finish my degree in Computing Science Engineering.
    But, I am using the series 40 Nokia, to be exact my mobile is the 6100 which has almost the same features than the 7210, and I do http connections over the WAP Gateway of my networking operator. I haven&#7787; ever tried do them over GPRS yet, because at glance it "seemed" to work fine and I didn&#7787; really need to mess with it. Having this hardly controlled, well it turned out that I got some troubles in connections I report you so I hope you can also help me about:
    1.- Connections several times are cut, when it's opened not longer than 45 seconds about.
    1.1.- I found the trick that not closing the outputStream I have indefinied time to deal with them,
    having to close them manually, I mean connections.
    1.1.1 - Unfortunetly that doesn't happen always. The fact is that It works really fine but for some
    particular ocassions when It seems as if it couldn't find the server because it receives no
    data.
    WIth all this, I'd really like to know what the hells is actually going on the wap-gateway. Because one of the things I could realize is that http connection headers are completely changed and fullfilled of data, so I had to take really care with them in order to keep the one I needed.
    Probably that depends on the networking operator I am dealing with, isn't it?
    And going further connections are set up like the mother and father of the networking operator wap-gateway want, I guess, aren't they?
    And I'd like to ask you if my tricky thing is actually crazy just to get what I am looking for, because it doesn't work a few few times, but those make the application goes down.
    And another, When you talk about TCP/IP stack. You mean the queue which in a conventional connections processes are queued-up in waiting for the chance of being admitted to be processed if they are TCP incoming connections or in the oppsoite way if they are outcoming...?
    OK, thanks in advance , and sorry for my peculiar long message, because I'm not so used to write over here, though I am when I try to find answers to the unknown ;-)
    Congratulations to this forum and greetings to those who can read me.
    Greetings from the south-east of spain where sun is stuck on your face even if you use sun-glasses.
    peteparker ([email protected])

  • HTTP connection to ABAP runtime failed

    I am building a scenario where XI picks up a file from a directory and pushes an IDoc to ECC.  I have configured the interface with the Design tool, and I believe my setup in the Configuration tool are correct too, however I am encountering an error when testing the scenario by means of --
    Tools --> Test Configuration.
    The testing tool is giving me the following error upon processing the reciever determination:
    HTTP connection to ABAP Runtime failed.
    Error: 403 Forbidden
    URL: http://serveraddress:port/sap/xi/simulation?sap-client=100
    User: PIDIRUSER
    First of all, I am not sure who the PIDIRUSER is, I assume it's a system user?  Second, given that this error is a HTTP connection error, I am lead to believe that the issue lies somewhere in the RFC connection from XI -> ECC.  I am not sure why exactly it's attempting to connect via HTTP as my communication channel is using the IDoc adapter with an RFC destination to connect to ECC.  Possibly I have configured this incorrectly.  I have read about having to configure a RFC adapter when posting messages from R/3 to XI, does the same apply when posting an IDoc from XI to ECC?  Does anyone have any other thoughts as to why this error may be occuring?  Thanks in advance for your time and help.

    This might help you
    http://help.sap.com/saphelp_nw04/helpdata/en/82/f4993c03e0cd37e10000000a11405a/content.htm
    /people/michal.krawczyk2/blog/2005/06/28/xipi-faq-frequently-asked-questions
    http://help.sap.com/saphelp_nw04/helpdata/en/39/83682615cd4f8197d0612529f2165f/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/39/83682615cd4f8197d0612529f2165f/frameset.htm
    Regards
    Agasthuri Doss

  • Configuring Sender HTTPS Connection -- Server/Client Authentification

    Hello together,
    I need to configure an HTTPS Sender Connection with client and server authentication. I have already check the documentation however I am still not sure about the particular steps. My questions are as follows:
    - Do I configure the HTTPS connection on the ABAP or JAVA stack?
    - Is it necessary to setup an HTTP sender communication channel
    - How does the URL look like (compared to HTTP connection)?
    I have provided XI certificates to the client and the client has provided the certificates to me already. So I guess I have to import them somehow on XI.
    Any help is appreciated!
    Thank you very much.

    Hi
    Please follow below steps for HTTPS configuration as sender
    You need to use either SOAP adapter or XI Adapter for HTTPS connectivity.
    Here configure the Security Check for Inbound Messages.
    Refer below links
    http://help.sap.com/saphelp_nw04/helpdata/en/fc/5ad93f130f9215e10000000a155106/frameset.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/4f/0a1640a991c742e10000000a1550b0/frameset.htm
    XI3.0: Soap Sender with HTTPS
    SAP Security Guide XI, HTTP and SSL
    http://help.sap.com/saphelp_nw04/helpdata/en/14/ef2940cbf2195de10000000a1550b0/content.htm
    http://help.sap.com/saphelp_nw04s/helpdata/en/97/818a4286031253e10000000a155106/frameset.htm
    No configuration is required in the adapter-specific sender channel configuration (inbound) of the Integration Directory.
    The authentication/authorization is performed by the J2EE Engine and therefore needs to be configured with the Visual Administrator. This configuration is described in the J2EE Engine Administration Manual and is outlined in the following section.
    When a message is to be sent to the Adapter Engine (and ultimately to the Integration Server), the J2EE Engine serves as the SSL Server and presents its server certificate to the client as part of the SSL handshake procedure.
    Client-Side Configuration (Required)
    The public certificate of the trusted authority (CA) that signed the public certificate of the SSL server needs to be imported to the list of trusted certificates of the SSL client. This allows the SSL client to accept the certificate of the server in the SSL handshake.
    Server-Side Configuration (Optional)
    If basic authentication is used, no additional configuration is required on server side.
    If client certificate authentication is requested or required by selection of the corresponding option in the SSL service and configuration of the ClientCertLoginModule in the SecurityProvider service (using the J2EE Administration Tool), additional configuration steps are required.
    If the server certificate check on the client side is successful, the client sends its public certificate to the server as part of the SSL handshake (when requested). The server needs to map the certificate to a user for authentication and will then check the authorization based on the security roles of the user.
    Perform the following steps to allow the J2EE engine to map the client certificate to a user:
           1.      Import the CA cert of the client certificate to the list of trusted certificates (TrustedCAs keystore view in the keystore service) and import the client cert to an arbitrary keystore view.
           2.      Map the client certificate to an existing user with role SAP_XI_APPL_SERV_USER by using the Visual Administrator, SecurityProvider service, UserManagement tab page.
    Refer below link
    Here u go
    http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm
    http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm

  • Http connection timeout for business services from proxy service?

    I've only done limited experiments in ALSB (2.1) at this point, but a question occurred to me, and I can't find this mentioned in the docs anywhere.
    When a proxy service configures a connection to a downstream business service through HTTP, is it possible to configure an http connection timeout value? This will cause the connection attempt to fail if it takes too long to determine whether the connection attempt succeeded or failed.
    I've heard that this is one advantage that Axis has over JAXRPC/SAAJ, as a connection timeout value can be specified.

    Hello Billy
    Thanks for the reply. I thought there may be some implementation of begin_request in another environment that had the option to specify a connect timeout. But as you have explained, it doesn't work like that. As always, I learn something every day!
    So realistically if I want to stop the calling process hanging in the event of the server not being available, I need use the message based approach...send a message containing the request to another process via a message queue and attach to the reply queue and wait for a message comming back with a timeout. Does that sound like a reasonable approach?
    Thanks
    David

Maybe you are looking for

  • The link from my email for verification of my apple account is not working correctly!

    So i created a new apple ID account. And they successfully sent an email link to verify the email address. When i open the link, it asked me to sign in. After i sign in, it directly sends me to a site saying, "Sorry! sorry your session has been expir

  • KALC (recons) eliminated in ECC 6.0 with New GL?

    Hello all, In ECC 6.0, New GL functionality, is transaction KALC, where the reconciliation postings happen between CO-FI eliminated? So the allocations for that matter would not be a Month end activity? All types of allocations and therefore their re

  • By-product subcontracting process

    what is the By-Product process in subcontracting,please explain whole process with tcode and movement type?? .which is t-code and movement tpe we supply the assemble goods and which is movement type we consume it ad what are the the process we receiv

  • Error...NoSuchMethod: Main???

    I am taking a course in Java Networking, but never had Java, and get my four classes to compile and build fine, but when I try to run my client program, I get this error. java.lang.NoSuchMethodError: main Exception in thread "main" No idea what Java

  • Reader doesn't play zero size (width x height) RMA, e. g. sound, anymore

    Hi, Just to make sure I didn't miss something. It seems that newer versions of Adobe Reader with separate FlashPlayer plugin deny playing zero size (i. e. not consuming document page space) RMAs anymore. In case of short auto-played sound RMAs, the u