HTTPS server on J2EE Engine

Question

Hi there,
I have to write a little HTTPS server which runs on the J2EE Engine for handling some HTTPS requests.
For this, the server should use a certificate from the J2EE Engine's Key Store. Wiht the following code I try to load the certificate and start the server.
String privKeyView = "service_ssl";
          String privKeyAlias = "ssl-credentials";
        if ((privKeyView != null) && (privKeyAlias != null)) {
        SAPSecurityResources secRes =
            SAPSecurityResources.getInstance();
        KeyStoreManager ksMgr =
            secRes.getKeyStoreManager(PermissionMode.SYSTEM_LEVEL);
        java.security.KeyStore ks = ksMgr.getKeyStore(privKeyView);
        ISsfProfile privKeyProf = ksMgr.getISsfProfile(ks, privKeyAlias, null);
        java.security.PrivateKey privKey = privKeyProf.getPrivateKey();
        KeyManagerFactory kmf =
            KeyManagerFactory.getInstance("SunX509");
        kmf.init(ks, keypassword);
        SSLContext sslcontext = SSLContext.getInstance("SSLv3");
        sslcontext.init(kmf.getKeyManagers(), null, null);
        ServerSocketFactory ssf = sslcontext.getServerSocketFactory();
        SSLServerSocket serversocket =
            (SSLServerSocket) ssf.createServerSocket(10443);
        final String[] enabledCipherSuites = { "SSL_RSA_WITH_RC4_128_MD5" };
        serversocket.setEnabledCipherSuites(enabledCipherSuites);
        Socket client = serversocket.accept();
The problem is, that the accept() fails with an javax.net.ssl.SSLException: No available certificate corresponds to the SSL cipher suites which are enabled.
This seems to make sense, because the Cipher suite isn't bound to that custom port (which is configured at SSL Provider Service of Visual Admin). But on the other hand I cannot add any custom entry in Visual Admin.
Does anybody has expierience in writing an SSL Server on J2EE Engine? Please help. Any hint will be highly appreciated.
Thanks in advance,
Matthias

Answer 1

Hi Eddy,
Sorry just got round to checking on this. The documentation you point to here is what we used as the basis for our setup.
We are attempting to use End-2-End SSL and did modify the SWD profile accordingly. It does not work however. If I connect via SSL directly to the J2EE server it works fine. Also connecting via HTTP thru the SWD works as well.
We are unsure as to whether there is something (parameters, service, etc.) that we have to set up via SMICM and/or RZ10 to enable SSL on the ICM? Or even whether that is necessary.
Ideally what I'd like is if someone can explain step-by-step what needs to be set up in the ABAP stack/message server that would be great.
Thanks
Brian