How to do Handshake with tired party(bank) HTTPS URL from SAP PI server

Dear Expert,
I have developed bunch of scenarios, all are synchronous ABAP proxy to HTTP_AAE with bank on PI 7.4(dual stack). Bank web server is HTTPS enabled server. Our ABAP developments are still in progress also we have few issue in connection from ECC to PI.but that is not the focus of discussion here.
we want to do the handshake to check the connectivity with bank on their HTTPS URL from PI. Bank has provided the privet key for SSL from their server and corresponding public key they have maintained on their server. I have imported the private key under NWA -> Certificates -> Key Storage -> TrustedCA->Import Entry->Entry Type->PKCS#12->select the SSL.p12 file->import , also I have selected the option to "Use SSL" in HTTP_AAE receiver communication channel and selected the corresponding entryin  "keystore view" and "keystore entry". All these I have done in our DEV system, and we are trying to connect our PI dev to bank Dev server.
Questions
Is there any specific steps to do the handshake with third party HTTPS(bank in my case) server? if not, how can we just test the HTTPS connectivity by using the SSL private installed on our PI server, without running the complete scenarios. Our PI has been installed on UNIX, and "telnet https url 443" is working, as network team has opened the HTTPS port.
We have not enabled the SSL technically on our PI server, and we have not installed any generated certificate from our PI server. Moreover, we have not made our PI url as "https:hostname:port" as we just need to communicate with bank by using their private key. Do you guys think we should enable the SSL? if yes, please explain why.
What is the best practice to test the connection with third party having HTTPS URL? how can I just assure HTTPS communication is working fine, before testing my actual scenarios.
Thanks for helping always.
Regards,
Farhan

Hi Farhan,
Some part of the blog is applicable for sending HTTPS request to partners/third party (Receiver SOAP Adapter).
If banks certificates are already in trustedCA, then,  can you check if it also imported under user PIISuser under Identity management in NWA. If above 2 steps are done then i think your are good to go. But be careful when you install certificate, it should be in proper order.
As you already mentioned, connectivity is already established and you are able to PIng/telnet from pi server, connectivity looks ok.
While sending request, if you are getting 401 unauthorized, below might be the reason -
1. Certificate not installed correctly or some missing steps
2. Partner or TP is not ready to receive it, some certificate issue in there side.
other than 401 means you are ok (As per certificate and Connectivity) - 403 and 500 errors are next stops.
403 - error because of encoding method.
500 - data issue.
Regards
Aashish Sinha

Similar Messages

  • How to provide a button in bsp that downloads data from SAP into powerpoint

    hi,
    how to provide a button in bsp that downloads data from SAP into powerpoint
    this absurd requirement is needed by my client.
    thanks
    saad

    Hi,
    Look at tools like the things mentioned above or things like
    http://www.investintech.com/products/developer/creatorsdk/creatorsdkmain/
    http://command-line-image-converter.qarchive.org/
    You need to look for tools that can run via the command line and thsu be executed as external command (http://help.sap.com/saphelp_nw2004s/helpdata/en/fa/0971d4543b11d1898e0000e8322d00/frameset.htm)
    Eddy
    PS. Reward the useful answers and you will get <a href="http:///people/baris.buyuktanir2/blog/2007/04/04/point-for-points-reward-yourself">one point</a> yourself!

  • How Good Is Lion With 3rd Party Applications?

    Hello everyone, I was wondering how well Lion is running 3rd party applications? More specifically ProTools (LE)? I've heard a few rumors that Lion has been a little buggy with things like that, So I just thought I would ask before I go ahead and purchase it.
    Thank you for reading!
    --Benjamin

    Happy reading:
    http://roaringapps.com/apps:table

  • How to integrate DRM with third party tool for loading metadata in SQL table

    Experts,
    I am new to DRM and I have a requirement in which we want to integrate DRM with third party tool(lets say SQL table) as target and load metadata from DRM (Parent node, name , alias etc) to SQL table (same column name)
    Is there any way we can integrate DRM to export the same to table directly instead to files. If yes what are the steps we have to follow.
    Is there anyway we can customize DRM to execute queries or run batch
    Can I have a basic example please.
    Thanks in advance,
    Regards,

    1. Use DRM Export to Table option, for that create an External Connection first for the Target Database and select the respective Tables to which you wish to Export the Hierarchy information.
    2. You can perform most of the DRM Actions via the DRM_BATCH_CLIENT.exe.
        Please refer to Using the Data Relationship Management Batch Client of DRM User guide.
    let me know if you have any issues.

  • How to integrate iReceivables with third party payment system?

    Hi,
    My requirement is to integrate iReceivables with third party payment system.
    Can anyone guide me to achieve this.
    Thanks & Regards,
    Sunita

    Hello Prasad,
    <b>Connection with an External Payroll System</b>
    Payroll Outsourcing functionality allows you to compile master data or payroll data in the SAP system to submit to a third-party service provider in an electronic format. The Outsourcing solution available in the United States and Canada provides a generic interface which writes data into an IDoc (Intermediate Document) for transport to a third-party system. In order to transport data into and out of the SAP system, you must set up a logical system, partner definition, and outsourcing ports.
    If you have built your own payroll interface, using the Interface Toolbox, for example, you can use the Import section of this scenario. The Export section applies only to the transport of IDocs.
    For more information regarding outsourcing, refer to the SAP Library, Human Resources  -> PY Payroll  -> PY-US United States Payroll or PY-CA Canada Payroll  -> Outsourcing.
    http://help.sap.com/saphelp_erp2005vp/helpdata/en/af/f4ea3444e9c47fe10000009b38f83b/frameset.htm
    Import Payroll Results from a Third-Party System
    http://help.sap.com/saphelp_erp2005vp/helpdata/en/0a/e62481feaf11d1a5500060087832f8/frameset.htm
    regards
    Prasad
    Message was edited by:
            prasad chintala

  • How to take Bank payment voucher from sap fico production user?

    Hi
    how to take Bank payment voucher form sap fico from production user?
    anyone can help?
    Thanks in advance?
    Thanks
    Chandu....

    Hi,
    Ask your ABAP consultant to develop Z program for payment voucher printing.
    In program selection screen will be
    1. Company Code
    2.  Document Number
    3. Fiscal Year
    and you can get the desire output according the data key in the document.
    Regards
    Shayam

  • Https access to Sap Content Server 620 with R/3 46C

    We are trying to access the Sap Content Server 620 via Https.
    We do not want to administer it via HTTPS, (as we know CSADMIN doesn't support Https in rel. 46C as for note 712332). We want to do in way that the users when do check-in/out of originals these go across the
    network using Https instead Http.
    According note 712330 it should be possible.
    Anyone already did it ?
    Any suggestions ?
    NOte 506314 is not clear. We are in doubt how we applyed it.
    What we did:
    0)activate the SSL on the Sap COntent Server Web Site, requiring and installing a CA certificate.
    1)On the R/3 server in tx OAC0 with %HTTPS filled up the
    two boxes with "%HHTPS
    required"                                           
    1)unpacked the Sap criptolibrary and copied all the files (including those in ntintel subdirectory created during the unpacking) under c:\Programmi\Sap\Frontend\Sapgui on a frontend PC.                                                                               
    2)set the env. variable SAPHTTP=c:\Programmi\Sap\Frontend\Sapgui on 
    Frontend PC                                                                               
    3) from c:\Programmi\Sap\Frontend\Sapgui we created both the SAPSSLC.pse and the SAPSSLS.pse file with the command  :            
    3) from c:\Programmi\Sap\Frontend\Sapgui we created both the          
    SAPSSLC.pse and the SAPSSLS.pse file with the command  :              
    sapgenpse get_pse -noreq -p C:\Programmi\SAP\FrontEnd\SAPgui\<PSE-NAME>
    CN=localhost                                                                               
    4) we run the test: saphttp https://itmif069
    from the frontend to the server where the Content Server is (itmif069). We recive the error:
    trc file: "dev_http", trc level: 2, release: "620"
    Fri Oct 08 12:26:46 2004
    [2256] sccsid: @(#) $Id: //bas/620/src/krn/ftp/http.c#26 $ SAP
    [2256] HTTP Start : argc - 2 a0 - saphttp
    [2256] https//itmif069
    [2256] SECUDIR=C:\Programmi\SAP\FrontEnd\SAPgui
    <<- SapSSLSetTraceFile()==SAP_O_K
    =================================================
    = SSL Initialization
      SapISSLComposeFilename(ssl_lib): using default "sapcrypto.dll"
      SapISSLComposeFilename(server_pse): using default "SAPSSLS.pse"
      SapISSLComposeFilename(client_pse): using default "SAPSSLC.pse"
      SapISSLComposeFilename(anon_pse): using default "SAPSSLA.pse"
    = found SAPCRYPTOLIB  5.5.5C pl16  (Jun 10 2004) MT-safe
    = found SECUDIR environment variable
    = using SECUDIR=C:\Programmi\SAP\FrontEnd\SAPgui
    =  secudessl_Create_SSL_CTX():  PSE "SAPSSLA.pse" not found,
    =      using PSE "SAPSSLC.pse" as fallback
    = The Server SSL_CTX
    =    provides this ordered list of 9 ciphersuites:
    =       1.  SSL_RSA_WITH_RC4_128_SHA
    =       2.  SSL_RSA_WITH_RC4_128_MD5
    =       3.  SSL_RSA_WITH_3DES_EDE_CBC_SHA
    =       4.  SSL_RSA_WITH_DES_CBC_SHA
    =       5.  SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
    =       6.  SSL_RSA_EXPORT_WITH_RC2_CBC_40_MD5
    =       7.  SSL_RSA_EXPORT_WITH_RC4_40_MD5
    =       8.  SSL_RSA_WITH_NULL_SHA
    =       9.  SSL_RSA_WITH_NULL_MD5
    = Success -- SapCryptoLib SSL ready!
    =================================================
    <<- SapSSLInit(, read_profile=0)==SAP_O_K
    ERROR => [2256] URI https//itmif069 [http.c       774]
    ERROR => [2256] Connect to Host  Port 443 error: NIECONN_REFUSED
    [http.c       777]
    We do not know if the criptolibrary ha to be instyalled to the R/3 server to.
    We do not know if the CA certificate instalelled on the Sap COntent Server web site has to be installed on the R/3 server too.
    Any suggestion ?
    Regards

    Caro Mauro,
    I'm more or less in the same situation right now.
    Taking into account that you ask for help on this subject last 2004 Oct. I suppose that you have probably solved the problem.
    Please can you help me with the solution implemented.
    Find below my current work e-mail adress
    [email protected]
    Thanks in advance,
    Best regards, Xavier Grau.

  • How to apply Password Protection On attachment send through mail from SAP

    Hi All,
       I want to apply Password Protection on file send as an attachment from SAP on Email.
    I know how to send email from sap with attachment in it.  A smartform is coverted to a attachment and send on email.
    But how can i apply password protection on it.
    Any type of file format will be fine. I just need to know how can i make that file as password protected.
    Thanks in advance.
    Sonal Jain.

    >
    Sonal Jain wrote:
    But how can i convert the PDF to folder and than how can i zip that folder with password protection.
    Not folder but file (I do hope you understand the difference). Have you tried to search SDN at all? I don't have much time, but before replying initially I did just a quick search and it brought several posts mentioning the archiving functionality. And I'm sure 'Smartform to PDF' will bring up gozillion posts. Also I find the Google search with addition 'site:sap.com' to be quite helpful.
    However, I would still recommend to review the requirements. Why exactly do you need this password protection? If there is a fear that someone other than a recipient might get access to the email account then there is really a bigger security issue in the organization and it should be resolved by some other means. As I have mentioned, password does not really add much protection.
    Out of curiosity I briefly looked at the IRM description on the Microsoft's web site and it doesn't seem to be very helpful. First of all, it's the MS software and has to be installed on the user's PC and configured (how do we know the emai recipients are even on Windows?). Also it does say "Prevent an unauthorized recipient from accessing e-mail content", but I didn't quite get how exactly. Is there a retinal scan that comes with it? And the list of things it does not do gives you the whole another perspective on the email security.

  • How to set Default text when sending a blank mail from SAP

    Hi all,
    How to add Signature with company logo in the mail body.
    User should see at least one default text (eg; Hi) in the mail body if the sender did not type any text in the mail body when sending a mail from SAP.
    Is it possible to set like this on Subject also.
    Kindly share your ideas.
    Regards,
    Mathan A

    Hi Mathan,
    Please check sap note
    SAP Note No. 1304146 Email Signatures feature note
    1163250 - How to Create an Email Signature on several rows
    I hope it will solve your issue.PLease mark thread as answerd.
    Best Regards,
    Atul

  • How to migrate from SAP content server to OPENTEXT?

    We have been using SAP content server as our storage for archived data for years.
    Now we plan to start using OPENTEXT to admin our archived data.
    How can we use OPENTEXT together with existing SAP content server?
    My idea is to treat content server as any other media as as DVD, WORM, etc.
    However, I do not see that OPENTEXT can be configured to admin content server .
    If so, how to transfer whatever on the content server to IXOS?
    We are at Opentext 9.5.x
    Please share your experience. Thanks!

    hi,
    Please refere SNote 1043676.
    Also, need to understand the following,
    How to move an entire content repository from one content server to another
    Sometimes you may need to move a content repository - but not necessarily all the content repositories from one content server to another. This can be done without much drama. Here is a means that I've used in the past:
    Use report RSCMSEX to export the repository from the source content server.
    Create a repository of the same name on the target content server.
    Use Report RSCMSIM to import the repository into the target content server.
    Delete the repository from the source content server (if desired!).
    The SAP progrm sapkprotp controls the import and export. The ABAP reports allow you to specify the RFC destinations where sapkrpotp runs.
    For lager repositories
    The programs  listed above cannot deal with the whole content repository at the same time. For a slower migration, try using the program RSIRPIRL. This approach allows you to do the migation on a live system.
    Create the new content repository on your new content server.
    Create the new content category.
    If using distribution, distribute the new documents to the new category. otherwise change redirected category for DMS_C1_ST
    Relocate using the program.
    benaakraja

  • How to call an EXE file on a remote system from SAP system?

    Hi Friends,
    I want to execute an EXE file existing on the remote system from SAP system. Could some one give me an idea of how to execute that?
    Thanx in advance,
    Ram

    Hi Ram,
    Try this
    SXPG_COMMAND_EXECUTE
    Reward if this helps,
    Satish

  • How to Synchronization Outlook with third party system?

    Our Customer has a website which has a table by name task. This task table on the website is populated by admin of the website. Each
    task is assigned to sales person. The Customer wants the website task to be synchronized with
    outlook task for each sales person.
    What we have already done
    We have already created a table and pages on the website. Allowing
    Admin user to create/edit/delete
    task on the website.
    We have created a web service that pulls and pushes data from the website's
    task table by sales person.
    We have added a "Synch" button in the sales person's outlook.
    On click of the "Synch" button we make a call to the
    web service
    and the synch between outlook task and website is done. I.E. task are
    created/updated in outlook, closed task marked in outlook are closed on
    the website.
    What I am unable to figure out
    We do not want sales person to click the Synch button after every few
    minutes, so we want outlook to call our process periodically, just like
    send-receive in outlook. However I am unable to find a hook provided by
    outlook to call a process periodically.
    How can we do this?
    Thanks
    Anand

    1. Use DRM Export to Table option, for that create an External Connection first for the Target Database and select the respective Tables to which you wish to Export the Hierarchy information.
    2. You can perform most of the DRM Actions via the DRM_BATCH_CLIENT.exe.
        Please refer to Using the Data Relationship Management Batch Client of DRM User guide.
    let me know if you have any issues.

  • How to clear invoices with different house banks

    Hi,
    i have posted 3 invoices to one vendor
    now i want to clear 2 invoices from one house bank ( citi bank) and 1 invoice from another house bbank (abn amro )
    how can i make settings in fbzp ?
    thanks inadvance for ur answer
    points wil b assigned
    Regards,
    Rajesh

    Can you elaborate more on the business requirement for this ? Is it like the payment program can check whethet the payment can be made from the first house bank and then if not, do it from the other house bank ?
    If so, go to FBZP -> Bank Selection and then enter one more entry for the same payment method as this vendor, and then enter Rank Order 2 and then enter the corresponding house bank info.
    Thanks,
    Nandita

  • How to Retrive data Form Third party tool & up lode  in  SAP

    HI Friends,
    My client was implementing sap & parlay  .NET for   HR module .
    my client requirement was what ever amount   he payed  for Employees  that should also uplode in sap.
    In SAP he is treating employee as Vendor .
    so please guide me how can I Retrive data from third party tool & how can i uploaded in sap .
    Regards,
    Reddy

    Hi,
    Third Party Tool must be having some features of downloading data in a format like Excel.
    In SAP Side, this File is going to be your input...Now you can try different options:
    1) Identify the IDOC that serves your purpose and populate the idoc and fire an Inbound IDOC.
    2) Run a BDC for your relevant Txn Code by uploading the Third Party generated Excel data into an internal Table.
    3) Use an Standard BAPI to upload data into SAP.
    4) If possible, Use an SAP Provided Direct Input program to pump data in SAP.
    You need to give the expected format of Excel to the Third Party user generating the Excel for you.

  • Issue with Replication of Bank Account Numbers from ECC to CRM.

    Hi,
    I am trying to transfer business partners from ECC to CRM, I see errors in SMW01, stating that Bank Key is not valid for US, I have then performed the Initial load for DNL_CUST_BNKA to tranfer Bank Master Data, but again getting error but this time on BANK ACCOUNT NUMBER.  How do I transfer the BANK ACCOUNT NUMBER of Business Partners from ECC to CRM. Before starting the initial load for BUPA_MAIN do I need to run any other Initial load to move the BANK ACCOUNT NUMBERS to  CRM?
    I have already moved Bank Master data using DNL_CUST_BNKA, but can't able to replicate BANK ACCOUNT NUMBERS, can someone please provide me some steps which I need to perform to tranfer BANK ACCOUNT NUMBER.
    Now when I ran the initial load for BUPA_MAIN , all Business partners which do not have BANK ACCOUNT NUMBERS are replicated successfully but the one which have Bank Details did not got transferred and gave errors for BANK ACCOUNT NUMBER, Please provide some suggestions.
    Thanks.
    Jennifer

    Willie,
    Thanks for the reply:
    Error: BANK ACCOUNT NUMBER    ******8547 is not valid
    Support pack level:
    SAP_ABA  701  0003
    SAP_BASIS 701 0003
    BBPCRM   700  0002
    Thanks.
    Jennifer

Maybe you are looking for