Changes in httpd.conf and sap server 7.3 for using apache as proxy to irj

We need to know the settings for using apache as a reverse proxy server in front of irj portal on SAP Netweaver 7.3. We have tried the following settings in httpd.conf but we cannot see the contents on irj portal in the html page on the browser while using apache as reverse proxy.
ProxyPass /irj/ http://erpaix61.ca.com:50000/irj/
ProxyPassReverse /irj/ http://erpaix61.ca.com:50000/irj/
ProxyPass /testapp http://erpaix61.ca.com:50000/testapp
ProxyPassReverse /testapp http://erpaix61.ca.com:50000/testapp
RewriteRule ^/(sap\(.*) http://erpaix61.ca.com:50000/$1 [P,L]

Hi Luis,
I am facing the similar issue. I am not able to find the solution anywhere... Do let me know if u solved it
I am trying to reverse proxy SAP 7.3 using Apache 2.0.6.4 as the webserver. It was working fine with SAP 7.01. But with 7.3, i am facing GUI problems, the URL says i have been logged in, but the GUI is not being displayed....
"The requested URL /com.sap.portal.pagebuilder/html/EmptyDocument.html was not found on this server."
^^ is the error message that i am getting.
Below is the reverse proxy lines that i have added in the httpd.conf file of apache. which worked fine for SAP 7.01
ProxyRequests Off
ProxyPass /irj http://<SAP 7.3 IP>:50000/irj/
ProxyPassReverse /irj http://<SAP 7.3 IP>:50000/irj/
ProxyPreserveHost On
ProxyRequests Off
ProxyPass /webdynpro http://<SAP 7.3 IP>:50000/webdynpro
ProxyPassReverse /webdynpro http://<SAP 7.3 IP>/webdynpro
ProxyPreserveHost On
Regards,
Jatin Shetty

Similar Messages

  • Apache httpd.conf and Weblogic server integration.

    Dear friends,
    I am seeing a strange problem in my Apache and weblogic integration work.
    In the Apache httpd.conf file, under mod_weblogic.c module, if i dont turn DebugConfigInfo ON then my system is not working properly. always hitting with http 404 error. can you please explain why this is required and if required is it mandatory to turn it ON ?
    when i read in weblogic docs, its mentioned as to turn it OFF for security reasons. But if i make it as OFF then my website is not working properly.
    Here is the conents of mod_weblogic.c module in my httpd.conf file.
    <IfModule mod_weblogic.c>
    WebLogicHost rlw1csts08.bpweb.bp.com
    WebLogicPort 7001
    DebugConfigInfo On
    #EnforceBasicConstraints OFF
    PathPrepend /csmain-web
    ErrorPage /err/serverErrorWL.xml
    #WLLogFile "| /export/home/wwwst08/apache/bin/rotatelogs /export/home/wwwst08/apache/logs/WL_apache_error.log.%Y%m%d%H%M%S 86400"
    WLLogFile "/export/home/wwwst08/apache/logs/WL_apache_error.log"
    </IfModule>
    Please let me know your inputs. Its very urgent.
    Thanks
    subba.

    I donot have the complete httpd.conf with me right now but you have to follow the following steps:
    1) Compile Apache with ssl module included
    2) Instead of Port 80 change the port to 443 at global level or at virtual directory level
    3) If u want to redirect the traffic on port 80 to port 443 then also include mod_rewrite module while compiliing apache and write a rule to redirect the traffic from port 80 to 443

  • Please help!  Strange problem with HTTPD.Conf and OC4J (I think)

    Hi,
    We have been trying to configure the 10g "infrastructure" Apache server/instance to work with our own authentication module, and as part of this, we need to configure a directory alias containing some of our JSPs. To do this, the only thing that we did was that we took the standard HTTPD.CONF file that got installed with the 10g AS installation, and added a small section at the end.
    However, we are finding that if our addition to the HTTPD.CONF is included, instead of the JSPs in our aliased directory being processed, Apache seems to be just serving the JSPs as text pages :(..
    If we remove the section at the end of the HTTPD.CONF, and point a browser to the unaliased path, the JSPs get processed correctly.
    I was wondering if anyone here might take a look at our HTTPD.CONF below, and tell me if you can see something there that might be causing this behavior? The section that we added is at the very end. We think that the problem might be something like the "order" of the directives, etc. in the HTTPD.CONF file may be such that the alias is taking priority ahead of the OC4J, or something like that.
    Thanks in advance, and apologies for the long message.
    Jim
    =====================================================
    ServerType standalone
    ServerRoot "/orad59/10gAS/infrastructure/Apache/Apache"
    PidFile /orad59/10gAS/infrastructure/Apache/Apache/logs/httpd.pid
    ScoreBoardFile /orad59/10gAS/infrastructure/Apache/Apache/logs/httpd.scoreboard
    Timeout 300
    KeepAlive On
    MaxKeepAliveRequests 100
    KeepAliveTimeout 15
    MinSpareServers 5
    MaxSpareServers 20
    StartServers 5
    MaxClients 150
    MaxRequestsPerChild 0
    LoadModule onsint_module libexec/mod_onsint.so
    LoadModule mmap_static_module libexec/mod_mmap_static.so
    LoadModule vhost_alias_module libexec/mod_vhost_alias.so
    LoadModule env_module libexec/mod_env.so
    LoadModule define_module libexec/mod_define.so
    LoadModule config_log_module libexec/mod_log_config.so
    LoadModule agent_log_module libexec/mod_log_agent.so
    LoadModule referer_log_module libexec/mod_log_referer.so
    LoadModule mime_magic_module libexec/mod_mime_magic.so
    LoadModule mime_module libexec/mod_mime.so
    LoadModule negotiation_module libexec/mod_negotiation.so
    LoadModule status_module libexec/mod_status.so
    LoadModule info_module libexec/mod_info.so
    LoadModule includes_module libexec/mod_include.so
    LoadModule autoindex_module libexec/mod_autoindex.so
    LoadModule dir_module libexec/mod_dir.so
    LoadModule cgi_module libexec/mod_cgi.so
    LoadModule asis_module libexec/mod_asis.so
    LoadModule imap_module libexec/mod_imap.so
    LoadModule action_module libexec/mod_actions.so
    LoadModule speling_module libexec/mod_speling.so
    LoadModule userdir_module libexec/mod_userdir.so
    LoadModule alias_module libexec/mod_alias.so
    LoadModule access_module libexec/mod_access.so
    LoadModule auth_module libexec/mod_auth.so
    LoadModule anon_auth_module libexec/mod_auth_anon.so
    LoadModule dbm_auth_module libexec/mod_auth_dbm.so
    LoadModule digest_module libexec/mod_digest.so
    LoadModule proxy_module libexec/libproxy.so
    LoadModule cern_meta_module libexec/mod_cern_meta.so
    LoadModule expires_module libexec/mod_expires.so
    LoadModule headers_module libexec/mod_headers.so
    LoadModule usertrack_module libexec/mod_usertrack.so
    LoadModule unique_id_module libexec/mod_unique_id.so
    LoadModule setenvif_module libexec/mod_setenvif.so
    LoadModule perl_module libexec/libperl.so
    LoadModule fastcgi_module libexec/mod_fastcgi.so
    <IfDefine SSL>
    LoadModule ossl_module libexec/mod_ossl.so
    </IfDefine>
    LoadModule wchandshake_module libexec/mod_wchandshake.so
    ExtendedStatus On
    Port 7777
    Listen 7777
    User oracle
    Group dba
    ServerAdmin [email protected]
    ServerName ge1ssd04.test.com
    DocumentRoot "/orad59/10gAS/infrastructure/Apache/Apache/htdocs"
    <Directory />
    Options FollowSymLinks MultiViews
    AllowOverride None
    </Directory>
    <Directory "/orad59/10gAS/infrastructure/Apache/Apache/htdocs">
    Options Indexes FollowSymLinks MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
    </Directory>
    <IfModule mod_userdir.c>
    UserDir public_html
    </IfModule>
    <IfModule mod_dir.c>
    DirectoryIndex index.html
    </IfModule>
    AccessFileName .htaccess
    <Files ~ "^\.ht">
    Order allow,deny
    Deny from all
    </Files>
    UseCanonicalName On
    <IfModule mod_mime.c>
    TypesConfig /orad59/10gAS/infrastructure/Apache/Apache/conf/mime.types
    AddEncoding x-compress Z
    AddEncoding x-gzip gz tgz
    AddLanguage ar .ar
    AddLanguage da .dk .da
    AddLanguage nl .nl
    AddLanguage en .en
    AddLanguage et .ee
    AddLanguage fi .fi
    AddLanguage fr .fr
    AddLanguage de .de
    AddLanguage el .el
    AddLanguage es .es_ES .es
    AddLanguage he .he .iw
    AddLanguage hu .hu
    AddCharset ISO-8859-8 .iso8859-8
    AddLanguage it .it
    AddLanguage ja .ja
    AddCharset ISO-2022-JP .jis
    AddLanguage ko .ko
    AddLanguage kr .kr
    AddCharset ISO-2022-KR .iso-kr
    AddLanguage nn .nn
    AddLanguage no .no
    AddLanguage pl .po
    AddCharset ISO-8859-2 .iso-pl
    AddLanguage pt .pt
    AddLanguage pt-br .pt_BR .pt-br
    AddLanguage ltz .lu
    AddLanguage ca .ca
    AddLanguage sk .sk
    AddLanguage sv .sv
    AddLanguage th .th
    AddLanguage tr .tr
    AddLanguage cz .cz .cs
    AddLanguage ro .ro
    AddLanguage ru .ru
    AddLanguage zh-cn .zh_CN
    AddLanguage zh-tw .zh_TW
    AddCharset Big5 .Big5 .big5
    AddCharset WINDOWS-1251 .cp-1251
    AddCharset CP866 .cp866
    AddCharset ISO-8859-5 .iso-ru
    AddCharset KOI8-R .koi8-r
    AddCharset UCS-2 .ucs2
    AddCharset UCS-4 .ucs4
    AddCharset UTF-8 .utf8
    <IfModule mod_negotiation.c>
    LanguagePriority ar en da nl et fi fr de el it ja ko kr no pl pt pt-br ro ru ltz ca es sk sv th tr zh-cn zh-tw zh-cn
    </IfModule>
    AddType application/x-tar .tgz
    </IfModule>
    DefaultType text/plain
    <IfModule mod_mime_magic.c>
    MIMEMagicFile /orad59/10gAS/infrastructure/Apache/Apache/conf/magic
    </IfModule>
    HostnameLookups Off
    ErrorLog "|/orad59/10gAS/infrastructure/Apache/Apache/bin/rotatelogs /orad59/10gAS/infrastructure/Apache/Apache/logs/error_log 43200"
    LogLevel warn
    LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
    LogFormat "%h %l %u %t \"%r\" %>s %b" common
    LogFormat "%{Referer}i -> %U" referer
    LogFormat "%{User-agent}i" agent
    CustomLog "|/orad59/10gAS/infrastructure/Apache/Apache/bin/rotatelogs /orad59/10gAS/infrastructure/Apache/Apache/logs/access_log 43200" common
    ServerSignature On
    <IfModule mod_alias.c>
    Alias /icons/ "/orad59/10gAS/infrastructure/Apache/Apache/icons/"
    Alias /jservdocs/ "/orad59/10gAS/infrastructure/Apache/Jserv/docs/"
    Alias /javacachedocs/ "/orad59/10gAS/infrastructure/javacache/javadoc/"
    <IfModule mod_perl.c>
    Alias /perl/ "/orad59/10gAS/infrastructure/Apache/Apache/cgi-bin/"
    </IfModule>
    <Directory "/orad59/10gAS/infrastructure/Apache/Apache/icons">
    Options Indexes MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
    </Directory>
    ScriptAlias /cgi-bin/ "/orad59/10gAS/infrastructure/Apache/Apache/cgi-bin/"
    <Directory "/orad59/10gAS/infrastructure/Apache/Apache/cgi-bin">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
    </Directory>
    </IfModule>
    <IfModule mod_autoindex.c>
    IndexOptions FancyIndexing
    AddIconByEncoding (CMP,/icons/compressed.gif) x-compress x-gzip
    AddIconByType (TXT,/icons/text.gif) text/*
    AddIconByType (IMG,/icons/image2.gif) image/*
    AddIconByType (SND,/icons/sound2.gif) audio/*
    AddIconByType (VID,/icons/movie.gif) video/*
    AddIcon /icons/binary.gif .bin .exe
    AddIcon /icons/binhex.gif .hqx
    AddIcon /icons/tar.gif .tar
    AddIcon /icons/world2.gif .wrl .wrl.gz .vrml .vrm .iv
    AddIcon /icons/compressed.gif .Z .z .tgz .gz .zip
    AddIcon /icons/a.gif .ps .ai .eps
    AddIcon /icons/layout.gif .html .shtml .htm .pdf
    AddIcon /icons/text.gif .txt
    AddIcon /icons/c.gif .c
    AddIcon /icons/p.gif .pl .py
    AddIcon /icons/f.gif .for
    AddIcon /icons/dvi.gif .dvi
    AddIcon /icons/uuencoded.gif .uu
    AddIcon /icons/script.gif .conf .sh .shar .csh .ksh .tcl
    AddIcon /icons/tex.gif .tex
    AddIcon /icons/bomb.gif core
    AddIcon /icons/back.gif ..
    AddIcon /icons/hand.right.gif README
    AddIcon /icons/folder.gif ^^DIRECTORY^^
    AddIcon /icons/blank.gif ^^BLANKICON^^
    ReadmeName README
    HeaderName HEADER
    IndexIgnore .??* *~ *# HEADER* README* RCS CVS *,v *,t
    </IfModule>
    <IfModule mod_setenvif.c>
    BrowserMatch "Mozilla/2" nokeepalive
    BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
    BrowserMatch "RealPlayer 4\.0" force-response-1.0
    BrowserMatch "Java/1\.0" force-response-1.0
    BrowserMatch "JDK/1\.0" force-response-1.0
    </IfModule>
    <Location /server-status>
    SetHandler server-status
    Order deny,allow
    Deny from all
    Allow from localhost ge1ssd04.test.com ge1ssd04
    </Location>
    SetEnv PERL5LIB "/orad59/10gAS/infrastructure/perl/lib/5.6.1:/orad59/10gAS/infrastructure/perl/lib/site_perl/5.6.1"
    <IfModule mod_perl.c>
    PerlModule Apache
    PerlModule Apache::Registry
    <Location /perl>
    SetHandler perl-script
    PerlHandler Apache::Registry
    AddHandler perl-script .pl
    Options +ExecCGI
    PerlSendHeader On
    </Location>
    </IfModule>
    <DirectoryMatch /WEB-INF/>
    Order deny,allow
    Deny from all
    </DirectoryMatch>
    <IfModule mod_fastcgi.c>
    Alias /fastcgi/ "/orad59/10gAS/infrastructure/Apache/fastcgi/"
    ScriptAlias /fcgi-bin/ "/orad59/10gAS/infrastructure/Apache/Apache/fcgi-bin/"
    <Directory "/orad59/10gAS/infrastructure/Apache/Apache/fcgi-bin">
    AllowOverride None
    Options None
    Order allow,deny
    Allow from all
    SetHandler fastcgi-script
    <IfModule mod_ossl.c>
    SSLOptions +StdEnvVars
    </IfModule>
    </Directory>
    </IfModule>
    PassEnv ORACLE_HOME
    PassEnv LD_LIBRARY_PATH
    PassEnv NLS_LANG
    PassEnv TNS_ADMIN
    <IfModule mod_oprocmgr.c>
    <Location /oprocmgr-service>
    SetHandler oprocmgr-service
    Order deny,allow
    Deny from all
    Allow from localhost ge1ssd04.test.com ge1ssd04
    </Location>
    <Location /oprocmgr-status>
    SetHandler oprocmgr-status
    Order deny,allow
    Deny from all
    Allow from localhost ge1ssd04.test.com ge1ssd04
    </Location>
    </IfModule>
    include "/orad59/10gAS/infrastructure/Apache/Apache/conf/mod_oc4j.conf"
    include "/orad59/10gAS/infrastructure/Apache/Apache/conf/dms.conf"
    LoadModule rewrite_module libexec/mod_rewrite.so
    include "/orad59/10gAS/infrastructure/Apache/Apache/conf/ssl.conf"
    include "/orad59/10gAS/infrastructure/Apache/Apache/conf/mod_osso.conf"
    include "/orad59/10gAS/infrastructure/Apache/Apache/conf/oracle_apache.conf"
    # MY ADDITIONS TO HTTPD.CONF GO BELOW HERE....
    LoadModule my_auth_module /opt/myagent/apache/lib/libmy_apache_agent_mod_ssl.so
    AddModule my_apache_mod.c
    <IfModule my_apache_mod.c>
         MYAgentRoot /opt/myagent/apache
    </IfModule>
    <IfModule my_apache_mod.c>
    <Location />
    AuthType Basic
    Require valid-user
    AuthName MYAUTH
    </Location>
    </IfModule>
    <IfModule my_apache_mod.c>
    Alias /mydir/ "/orad59/10gAS/infrastructure/j2ee/OC4J_SECURITY/applications/sso/web/jsp/myagentdir/"
    <Directory "/orad59/10gAS/infrastructure/j2ee/OC4J_SECURITY/applications/sso/web/jsp/myagentdir/">
    AuthType Basic
    Require valid-user
    AuthName MYAUTH
    </Directory>
    </IfModule>

    Hi,
    I wanted to post what we found on this.
    As indicated in my original msg, we had an Alias directory in the httpd.conf. However, after thinking about the problem a bit, I think that the Alias was not the right thing to do.
    The Alias tells Apache to map a URL fragment to a FILESYSTEM location. Well, obviously, Apache only SERVES pages... it doesn't process JSPs.
    We switched to using a Redirect directive instead of the Alias, and things worked a little better, but we've run into a bit of a problem with "Redirect looping", but that's a different story :)...
    Jim

  • Apache httpd.conf and SSL

    I went from apache 1.3 on my Solaris 9 box to apache v2.0 I also compiles openssl to work with the new version. I now need to setup the httpd.conf with all the new settings for ssl and for my servletexec that remedy's midtier runs on. Does anyone have a sample httpd.conf file that would help me. I really need with it this weekend
    Thanks!

    I donot have the complete httpd.conf with me right now but you have to follow the following steps:
    1) Compile Apache with ssl module included
    2) Instead of Port 80 change the port to 443 at global level or at virtual directory level
    3) If u want to redirect the traffic on port 80 to port 443 then also include mod_rewrite module while compiliing apache and write a rule to redirect the traffic from port 80 to 443

  • How to do changes in Layouts setting and SAP scripts to meet requirment?

    hi SD gurus,
    Please explain me how create and work with Z output .
    where and how we do changes in Layouts setting and SAP scripts to meet the user requirments.
    pls forward func spec of Z output
    points will be rewarded
    thanx & regards

    you need ABAP skills to do this.
    basically you need:
    1) draw the layout on a piece of paper
    2) define the fields you need and find out the corresponding SAP fields
    3) check the document with the customer
    4) give this specification to the developer
    5) the developer will give you a program name and form name: place them in the message for the document.
    Roberto

  • HT5621 I have tried to changed my Apple ID and every time I try to use the new Apple ID it won't let me because when i try to update an app the old ID comes up to sign in.  I deleted that account so it will not let me use my new one.

    I have tried to changed my Apple ID and every time I try to use the new Apple ID it won't let me because when i try to update an app the old ID comes up to sign in.  I deleted that account so it will not let me use my new one.

    Content and Apple IDs -
    Content is forever tied to the Apple ID that bought it. Apple does not transfer content from one Apple Id to another. Apple does not merge Apple IDs. You will never be able to access your content bought with another Apple ID with a new ID.

  • I changed my primary email and icloud is still set for my old email. I tried deleting my icloud but it aks me for the old password associated with the old email that I don't have anymore. Any other sugestions on how to get icloud to change emails on my i

    I changed my primary email and icloud is still set for my old email. I tried deleting my icloud but it aks me for the old password associated with the old email that I don't have anymore. Any other sugestions on how to get icloud to change emails on my ios?

    I figured it out! I changed my email & password at the icloud site, then when I deleted the icloud account on my iphone - it still showed my old email but when i typed in my current password it went through. I was then able to sign back in with my current email and password. That was too easy for the amount of time I have put into this!  Glad its finally fixed.

  • HT204380 Facetime Activation: Could not verify the email address. Please re-enter and try again.   Tried so many times,even changed my appe ID and purchased a new facetime for iMac running 10.8.4 Mountain Lion,yet still same outcome. Can somebody help me?

    Facetime Activation: Could not verify the email address. Please re-enter and try again.   Tried so many times,even changed my appe ID and purchased a new facetime for iMac running 10.8.4 Mountain Lion,yet still same outcome. Can somebody help me?

    I have the same problem. FaceTime works fine on my iMac but when trying to use FaceTime on my Macbook Air, I have the same issue you describe.

  • Lion and lion server add on for Mac Mini Server

    I bought the Lion OS and Lion Server add on for my Mac Mini Server which runs Snow Leopard Server. When trying to install the Lion,
    it requests the Add on to be available, however the add on requests the Lion to be already installed before it can be downlaoded through
    App store. I made my purchases over the phone as neither was available in stores anymore. Egg and chiken dilema.
    I do not have a physical DVD with the Snow Leopard (Client) to follow some of the instructions I have read in the communities. Any
    workaround?

    For the Mini you must have Lion client installed to purchase the Server. You can download Lion from the Mini while it's running Snow Leopard. Once Lion is installed you should then be able to purchase the Server.
    Unlike past OS X Server releases the bulk of the software is within the Lion client. The Server is more or less a type of add-on to provide all the Server utilities and support. It's a relatively small download compared to the client.

  • Changed my yahoo account and ID now apps ask for old ID

    I recently Changed my yahoo account and ID now apps ask for old ID and password. How can I delete the old id? The cloud app is really irritating about this.

    The ID for apps will never change. They are locked to the Apple ID they were purchased/downloaded with. Apple ID and iTunes accounts cannot be merged, so you either delete the apps with the old ID and re-purchase/download them, or else you have to use the old Apple ID and password to update them.

  • I changed my Apple ID and all was good except for my mac. A window keeps popping up with my old ID for the iCloud. I ran out of solution. can some help

    I changed my Apple ID and all was good except for my mac. A window keeps popping up with my old ID for the iCloud. I ran out of solution. can some help

    Sign out of iCloud on your Mac, then sign back in with the new ID.

  • How to configure one dsl connection and one public ip in cisco router and map to one interface for using exchange server

    how to configure one dsl connection and one public ip in cisco router and map to one interface for using exchange server

    Hi ,
     Have you got any additional public IP Address from your service provider , If yes on router you can have static route for those additional IP Address pointing to your ASA  outside interface . 
    Accordingly you can configure NAT 
    HTH
    Sandy . 

  • Is server authentication mandatory for using SSL?

    Is server authentication mandatory for using SSL sockets, or is there a way around it?
    In other words, how can I take advantage of SSL sockets without dealing with any kind of certificates? Do I have any other options?

    Ok folks, I found my answer.Here�s the deal.
    Here are some helpful sites: I hope they will also help you understand this topic better and make your life little easier.
    //====================================
    http://www.onjava.com/pub/a/onjava/2001/05/03/java_security.html
    http://www-105.ibm.com/developerworks/education.nsf/java-onlinecourse-bytitle/96B42A25DD270CA886256BAA006351B4?OpenDocument
    http://www.ddj.com/documents/s=870/ddj0102a/rl1
    //====================================
    Neither Server nor Client authentication is mandatory. However, if you don�t use proper ciphersuite (that doesn�t require any authentication), the connection will die so to avoid this problem, you need to enable those ciphersuites manually. Read on.
    In most modes, SSL encrypts data being sent between client and server and also provides (optional) peer authentication.
    These kinds of protection are specified by a "cipher suite", which is a combination of cryptographic algorithms used by a given SSL connection. During the negotiation process, the two endpoints must agree on a ciphersuite that is available in both environments. If there is no such suite in common, no SSL connection can be established, and no data can be exchanged.
    The cipher suite used is established by a negotiation process called "handshaking".
    There are two groups of cipher suites which you will need to know about when managing cipher suites:
    �     Supported cipher suites: all the suites which are supported by the SSL implementation. This list is reported using getSupportedCipherSuites.
    �     Enabled cipher suites, which may be fewer than the full set of supported suites.
    This group is set using the setEnabledCipherSuites method, and queried using the getEnabledCipherSuites method. Initially, a default set of cipher suites will be enabled on a new socket that represents the minimum suggested configuration.
    Implementation defaults require that only cipher suites which authenticate servers and provide confidentiality be enabled by default. Only if both sides explicitly agree to unauthenticated and/or non-private (unencrypted) communications will such a ciphersuite be selected.
    When SSLSockets are first created, no handshaking is done so that applications may first set their communication preferences: what cipher suites to use, whether the socket should be in client or server mode, etc. However, security is always provided by the time that application data is sent over the connection.
    The suite is chosen based upon the credentials that each side possesses and suites that each side supports. For example, a server can�t support an RSA cipher suite unless it has an available RSA private key.
    The client and server must support at least one common cipher suite in order to communicate; if they both support multiple ciphers, the strongest available suite will be chosen.
    The strings are part of the SSL specification and are defined as:
    SSL_<key exchange algorithm>with<encryption algorithm>_<hash algorithm>
    When a number appears in the encryption algorithm, it refers to the key strength of the encryption: higher numbers are more secure.
    setEnabledCipherSuites(String[] suites) method controls which particular cipher suites are enabled for use on this connection.
    �     The cipher suites must have been listed by getSupportedCipherSuites() as being supported.
    �     Even if a suite has been enabled, it might never be used if no peer supports it, or the requisite certificates (and private keys) are not available.
    getSupportedProtocols(): Returns the names of the protocols which could be enabled for use on an SSL connection.
    setEnabledCipherSuites(String[] suites): Controls which particular cipher suites are enabled for use on this connection.
    Let me give you some code that will help you understand little better.
    One is Client.java for the client and the other one is Server.java for the server.
    Compile and run them in two separate consoles.
    ( By the way, I assume that you have properly installed JSSE on your system.)
    //===== Client.java: ===================================================
    import java.io.*;
    import java.net.*;
    import javax.net.ssl.*;
    public class Client
         public static void main(String[] args)
              (new Client()).doIt();
         }//end main
         private void doIt()
              int port = 3333;
              String host = "localhost";
    /*          String[] enable = {"SSL_DH_anon_WITH_RC4_128_MD5",
                        "SSL_DH_anon_WITH_DES_CBC_SHA",
                        "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA",
                        "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5",
                        "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA"};
    */          try
              SSLSocketFactory sslFact =
              (SSLSocketFactory)SSLSocketFactory.getDefault();
              SSLSocket s =
              (SSLSocket)sslFact.createSocket(host, port);
                   //String[] suites;
                   //Get all the default CipherSuites
                   System.out.println("\n*** Default CipherSuites ***\n");
                   String [] defaultSuites=sslFact.getDefaultCipherSuites();
                   for(int i = 0; i<defaultSuites.length; i++)
                        System.out.println("["+i+"] Default CipherSuite ="+defaultSuites);
                   //Get all the supported CipherSuites
                   System.out.println("*** ================= ***");               
                   System.out.println("\n*** CipherSuites Enabled by default ***\n");
                   String [] enabledSuites=s.getEnabledCipherSuites();
                   for(int i = 0; i<enabledSuites.length; i++)
                        System.out.println("["+i+"] Enabled CipherSuite="+enabledSuites[i]);
                   System.out.println("*** ================= ***\n");
                   System.out.println("***\n Supported CipherSuites ***\n");
                   String [] supportedSuites=sslFact.getSupportedCipherSuites();
                   for(int i = 0; i<supportedSuites.length; i++)
                        System.out.println("["+i+"]Enabled Supported CipherSuite ="+supportedSuites[i]);
                   //Get all enabled CipherSuites
                   System.out.println("*** ================= ***\n");
                   System.out.println("\n*** Old and Newly enabled Anonymous CipherSuites ***\n");
                   //s.setEnabledCipherSuites(enable);
                   //Enable all supported CipherSuites
                   s.setEnabledCipherSuites(supportedSuites);
                   String [] suites=s.getEnabledCipherSuites();
                   for(int i = 0; i<suites.length; i++)
                        System.out.println("["+i+"] Newly enabled Anonymous CipherSuites="+suites[i]);
                   System.out.println("*** ================= ***\n");
                   System.out.println(" The strongest available CipherSuite is chosen by the System.");
                   System.out.println(" But it has to be enabled first, otherwise it ignores it. ");
                   System.out.println("Currently Selected CipherSuite = "+s.getSession().getCipherSuite()+"\n");
                   System.out.println("*** ================= ***");
                   // Send messages to the server through
              // the OutputStream
              // Receive messages from the server
              // through the InputStream
              OutputStream out = s.getOutputStream();
              InputStream in = s.getInputStream();
                   PrintWriter p = new PrintWriter(out);
                   p.println("Hi Buddy!");
                   p.println("Wanna have a beer?");
                   p.println("All right, let's have some.");
                   p.flush();
                   out.close();
         in.close();
         s.close();
              catch (IOException e)
                   System.out.println(""+e);
    }//end class
    //===== Here's Server.java ==============================================
    import java.io.*;
    import java.net.*;
    import javax.net.ssl.*;
    public class Server
         public static void main(String[] args)
              (new Server()).doIt();
         }//end main
         private void doIt()
              int port = 3333;
              SSLServerSocket ss;
              String[] enable = {"SSL_DH_anon_WITH_RC4_128_MD5",
                        "SSL_DH_anon_WITH_DES_CBC_SHA",
                        "SSL_DH_anon_WITH_3DES_EDE_CBC_SHA",
                        "SSL_DH_anon_EXPORT_WITH_RC4_40_MD5",
                        "SSL_DH_anon_EXPORT_WITH_DES40_CBC_SHA"};
              try
              SSLServerSocketFactory sslSrvFact =
              (SSLServerSocketFactory)
              SSLServerSocketFactory.getDefault();
                   //Get all the default CipherSuites
                   String [] suites=sslSrvFact.getDefaultCipherSuites();
                   for(int i = 0; i<suites.length; i++)
                        System.out.println(""+i+". DEFAULT CIPHER SUITE="+suites[i]);
                   suites=sslSrvFact.getSupportedCipherSuites();
                   for(int i = 0; i<suites.length; i++)
                        System.out.println(""+i+". SUPPORTED CIPHER SUITE="+suites[i]);
                   System.out.println("*** ================= ***");
              ss =(SSLServerSocket)sslSrvFact.createServerSocket(port);
                   suites=ss.getEnabledCipherSuites();
                   for(int i = 0; i<suites.length; i++)
                        System.out.println(""+i+". ENABLED CIPHER SUITE="+suites[i]);
                   ss.setEnabledCipherSuites(enable);
                   suites=ss.getEnabledCipherSuites();
                   for(int i = 0; i<suites.length; i++)
                        System.out.println(""+i+". NEW ENABLED CIPHER SUITE="+suites[i]);
                   System.out.println("*** ================= ***");
              SSLSocket c = (SSLSocket)ss.accept();
    //          ServerSocket ss = new ServerSocket(port);
    //          Socket c = ss.accept();
              OutputStream out = c.getOutputStream();
              InputStream in = c.getInputStream();
                   BufferedReader br = new BufferedReader(new InputStreamReader(in));
              // Send messages to the client through
              // the OutputStream
              // Receive messages from the client
              // through the InputStream
              while(true)
    //               int i = in.read();
                        String inputString = br.readLine();
                        if(inputString != null)
                        System.out.println(inputString);
                   else
                        out.close();
                        in.close();
                        c.close();
                   ss.close();
              catch (IOException e)
                   System.out.println(""+e);
    }//end class
    //========= Good Luck! ===================

  • Pls help on error on ereader "this document is protected by DRM ( adobe digital rights management ) and is not currently authorized for use with your adobe id

    how do i solve this in order for the e reader to open the file?“this document is protected by DRM ( adobe digital rights management ) and is not currently authorized for use with your adobe id
    thnaks

    This is something you will need to talk to the publisher of the document. They might have to do something to allow you to open the file. (If you changed Adobe ID since buying the file, for instance, they might have to allow for that).

  • How do I cut and paste sets of lines for use in various Math questions?

    How do I cut and paste sets of lines for use in various Math questions?

    Thank you for your reply. My problem is much simpler than you are thinking. As a teacher I prepare sheets with random number generators.
    EG. 256 + 389= ______    or         467
                                                 -  384
           469 + 753= ______     
    or  5)750
    On a PC I was able to start a page of A4 with one set and then drag and drop down and across the page.
    On my Macbook I can get the numbers in but the lines do not copy. I asked at one of my One to One sessions and it had my 'trainer' stumped. He said he would make enquiries but so far no news. I am using Numbers.
    I hope I have explained my 'problem' satisfactorily.

Maybe you are looking for

  • Instructot iview is not working in portal

    Hi Experts, We downloaded instructor business package into portal and when we click on it its saying Portal runtime error. An exception occurred while processing your request. Send the exception ID to your portal administrator. Exception ID: 12:17_09

  • Custom UI or editor for input-parameter

    I think I need to implement a custom UI editor for an input-paramenter.  My input parameter is really a HashTable. I'd like to present a dialog that allows the user to enter any number of key value pairs.  The optional "editor" element  looks promisi

  • Using the new HTML 5 tags

    I can't  get the new HTML5 tags section, header and footer to work on my page.  When I change the divs to section it totally screws up the page rendering.I added the appropriate CSS to my style sheet.  What do I do? Here is the oiginal code: <!DOCTYP

  • X11 How To Stop xterm Auto Launch

    I am able to stop X11 from automatically launching the default xterm window when I manually start X11. I did that by changing the Leopard X11 plist: defaults write org.x.X11_launcher apptorun /usr/X11/bin/xhost But when I launch an X11 application, X

  • What roles needed on SLD for deployment

    Hello Gurus, We are in process of cleaning the roles a developer will have, We have SLD installed on a server and Portal on other server. To login to NWDI we use the url http://sap.company.com:53000/devinf And to connect to SLD we use url http://sap.