PGP decryption in Receiver Channel?

Hi SAP Gurus,
We have this HR interface that needs to be encrypted so the data will not be visible within PI monitoring tools.
As solution, we are planning to use this PGP module to do the encryption and decryption.
However as much as possible, we are trying to avoid doing the encryption/decryption on partners end (as main purpose is just to hide the data within PI).
This is the scenario we have in mind:
File to File scenario
1) Partner sends the raw file
2) PI receives the raw file and encrypts it using PGP encryption module and public key installed in PI.
Sender Channel configuration (does the encryption):
ENC    applyEncryption    true
ENC    applySignature    false
ENC    keyRootPath    C:\usr\sap\PI\keys
ENC    partnerPublicKey    PIpub.asc
3) Before PI sends the file which was encrypted earlier in PI, PI decrypts the file using PGP decryption module in the Receiver Communication Channel.
Receiver Channel Configuration (does the decryption):
DEC    keyRootPath    C:\usr\sap\PI\keys
DEC    ownPrivateKey    PIprivate.asc
DEC    partnerPublicKey    PIpub.asc
DEC    pwdOwnPrivateKey    ***********
I tried to test above scenario but I'm getting below error in the receiver communication channel..
Error    Exception caught by adapter framework: org.bouncycastle.openpgp.PGPPublicKeyRing found where PGPSecretKeyRing expected
Error    Transmitting the message to endpoint <local> using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: org.bouncycastle.openpgp.PGPException: org.bouncycastle.openpgp.PGPPublicKeyRing found where PGPSecretKeyRing expected
Could you please confirm if above mentioned scenario is possible?
And, what is the cause of the error?
Thanks

Hi,
you can try like this,
Encryption :
1
AF_Modules/MessageTransformBean
Local Enterprise Bean
3
2
AF_Modules/DynamicConfigurationBean
Local Enterprise Bean
2
3
localejbs/PGPEncryption
Local Enterprise Bean
1
4
CallSapAdapter
Local Enterprise Bean
0
1  applyEncryption                     true
1  encryptionAlgo                      AES_256
1  keyRootPath                        XXXXXXX
  1  partnerPublicKey                XXXXXXXXX
  1  pwdOwnPrivateKey              ***
Regards
srinivas

Similar Messages

  • As2 receiver channel, SEEBURGER AS2: 500 Internal Server Error

    Hi,
    There is one scenario in our landscape, its running in production, Proxy to As2. The interface working fine for last 2 weeks, today its showing error in As2 receiver channel saying
    Message processing failed. Cause: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: 500 Internal Server Error # , SEEBURGER AS2: 500 Internal Server Error #
    I have searched in forum, but couldnt get much idea on why this error encounters and how can we resolve it.
    Kindly provide your inputs to help me resolve this.
    Thanks,
    Ruchi

    Hi Ruchi,
    500 means the requested server does not understand the request (the requested service is unknown). The reason is obvisiously outside of PI. You have to contact the 3rd party owner and ask why the system is refusing the request instead of responsing like before.
    Regards,
    Udo

  • SFTP Receiver channel error :Message could not be forwarded to the JCA adapter.

    Hello Guys,
    I have different SFTP Receiver channels running in production from long time. Suddenly, they have started giving the same kind of error as below:
    Any suggestion where to look for the solution to this issue.
    Thank you!
    Regards,
    Simran

    Hi,
    Did you try connecting to the SFTP server using filezilla? May be something might have changed on the FTP server.
    You can use the xpi inspector to get additional information.

  • Content Conversion in receiver channel

    Hi all,
    I have a proxy to FTP scenario with no mapping involved.Over proxy communication PI is receiving the data, I am creating the CSV file using content conversion in receiver channel and placing the file at FTP.
    The file name is coming in one of the field of the input xml,I am using variable substitution and setting the file name from that particular field value.But as I don't want that node and file name element in my output file content, please guide me what parameters can I set in my content conversion to remove the FileNode from o/p csv file.
    The sample input xml is
    <MT>
    <Record>
    <Field1>1</Filed1>
    <Field2>2</Filed2>
    </Record>
    <Record>
    <Field1>3</Filed1>
    <Field2>4</Filed2>
    </Record>
    <FileNode>
    <FileName>InutFile</FileName>
    </FileNode>
    </MT>
    I want output xml to be like
    1,2
    3,4
    I have followed this blog /people/sravya.talanki2/blog/2005/08/11/solution-to-the-problem-encountered-using-variable-substitution-with-xi-sp12 to cut the FileNode, but it gives an error in cc parameters.
    In my actual i/p payload,the Record is 0..unbounded and there are 50 sub elements inside Record element.
    Please provide your inputs.
    Thanks,
    Ruchi

    Hi Ruchi,
    Change your structure like this.
    MT>
    <Record>
    <Field1>1</Filed1>
    <Field2>2</Filed2>
    </Record>
    <Record>
    <Field1>3</Filed1>
    <Field2>4</Filed2>
    </Record>
    <FileNode>
    <FileName>InutFile</FileName>
    </FileNode>
    </MT>
    Dont put the filenode under Record.
    Also Add the below parameters.
    FileNode.fieldSeparator     '0'
    FileNode.endSeparator     '0'
    FileNode.fieldFixedLengths     0
    FileNode.fixedLengthTooShortHandling     Cut
    FileNode.fieldNames     FileName
    Now use the same parameter mentioned in the blog .Your problem will be resolved.

  • Unable to clone File Adapter receiver channel for parallel processing

    Hi Experts,
    I am using variable substitution for File - RFC - File with out BPM scenario(using request response, oneway bean).
    While i placed the file in the sender FTP folder, the file didnt get picked up, but in communication channel monitoring, i am getting error ' Unable to clone File Adapter receiver channel for parallel processing'.
    Can anybody provide me suggestions to solve this error.
    Note : without variable substitution , the interface is working good.
    Is it due to, i am trying the source structure field in response file adapter?

    Hi,
    In your CC, do you use some additional paramaters ?
    like these one of point 47/48 of [Oss note 821267 - FAQ: XI 3.0 / PI 7.0/ PI 7.1 File Adapter|https://service.sap.com/sap/support/notes/821267]
    Maybe there is conflict with a parallel connexion and the bean used to do asynch-synch bridge...
    Mickael

  • BCM/SWIFT payment,  parameter file Receiver channel

    Iu2019m using the  u201CSWIFT_payload_parFile_Splitu201D Operation Mapping for the FILEACT payment transaction.
    The result should be
    1) payload file
    2) parameter file (*.par)
    This seems to work just fine. My problems starts with  the receiver channel for the *.par file.
    I need to know more about how to setup the modules and parameters in the "*.par" receiver channel.
    Is there a configuration guide for this?
    Thanks.
    Frank

    Hi Frank,
    I am facing similar issue. I am able to generate the parameter file but the overrides section contains only one parameter "Request Type" whereas there are other parameters that are mandatory. How do I get these filled?
    Regards,
    Deepthi

  • Com.sap.sql.DuplicateKeyException in file receiver channel

    Hi experts,
    I am currently testing the following scenario:
    xml file -> file sender ->file receiver -> csv file
    No mapping is used. Both channels are on the same PI 7.1 system.
    The transformation seems to work so far. The only problem I have is that my receiver channel does not post the message to the directory because of this error:
    Delivering the message to the application using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.DuplicateMessageException: Message Id f167e134-145e-4b2c-2d47-e431b8b34fd8(INBOUND) already exists in duplicate check table: com.sap.sql.DuplicateKeyException: [200]: Duplicate key.
    Is it not possible to use file sender and file receiver in the same scenario? Thanks for any help.
    Best regards.
    Oliver.

    Hi André,
    I am using the test option so the message can be processed multiple times. Anyway, I also tried using deletion but I still get the same error. I also tried a completely new file but still no change. When I check the comm channel I see that there is always created a new message id and when I search the rwb it posts two entries. One from the sender step and one from the receiver step. Seems to be alright to me.
    Regards.
    Oliver.

  • Error in file receiver channel "Unknown payload format 0 in the message"

    hello
    there is an errror in my receiver file channel with the status "Unknown payload format "
    my channel is file receiver channel.
    we implemented one sap note 1295430 and after that channnel is giving the error.
    Please forward your views.
    thanks.

    Hi there,
    First of all, what TBDL means - It means that the message was successfully delivered from Integration Server and that the messages are handed over to the Messaging System.
    TBDL occurs when the message is put into the receiving queue of the Messaging System.
    What can be done?
    Go to Messaging System receive servlet:
    http://<Host>:<PORT>/MessagingSystem/receive/<CONNECTION>/<PROTOCOL>
    If this was executed successfully, then the MS returns HTTP 200 to the Integration Server and the status TBDL moves to DELIVERING (check whether you have authorization to go to the above link).
    --> Log-in to SAP using - XIAPPLUSER & XIAFUSER, and check if they are blocked
    --> Check the messages:
    AF
    com.sap.aii.adapterframework.serviceuser.language
    com.sap.aii.adapterframework.serviceuser.name = XIAFUSER
    com.sap.aii.adapterframework.serviceuser.pwd
    AS
    com.sap.aii.applicationsystem.serviceuser.language
    com.sap.aii.applicationsystem.serviceuser.name = XIAPPLUSER
    com.sap.aii.applicationsystem.serviceuser.pwd
    Also, worth reading - /people/sap.user72/blog/2005/11/29/xi-how-to-re-process-failed-xi-messages-automatically
    Let us know if you have more questions.
    regards,
    Neetesh

  • Error in File Receiver Channel

    Dear All,
    I am Getting below error in File Receiver Channel.
    Message processing failed. Cause: com.sap.aii.af.ra.ms.api.RecoverableException: Error when getting an FTP connection from connection pool: com.sap.aii.af.service.util.concurrent.ResourcePoolException: Unable to create new pooled resource: FTPEx: User ABC cannot log in.
    Regards,
    Manikandan

    Hi Manikandan,
    Check the username and the password for the FTP server. If the username or the password is wrong then you would be able to post the message.
    Also, there might be a timout issue, In the timeout parameter enter some value.
    Ref: FTP Server connection Problem
    Check and update us.
    Thanks,

  • Invalid Signature Exception in Swift Receiver Channel

    Hi,
    We are using sap swift package for PI.We have BCM signing the file in ECC and PI validating the signature before sending the file out to the bank via the swift broker.
    We have configured as per these notes
    Note 1144603 - BCM: Back-end signature for data medium
    Note 1153053 - BCM: Backend signature for data medium
    Created the FINBRM certificate in STRUST in ECC.
    Deployed this certificate in PI.
    However we still get nvalidSignatureException when we run the interface on the receiver channel.
    com.sap.engine.interfaces.messaging.api.exception.MessagingException: com.sap.xi.swift.ParserException: com.sap.xi.swift.InvalidSignatureException.
    Any ideas?
    Thanks in advance.
    Ray

    It might be due to certificate not installed properly or invalid or expired certificate. Talk to Basis and verify in keystore that you have the valid certs stored.

  • Issue in Dynamic configuration in SOAP receiver channel

    Hi All,
    My scenario is file to SOAP. At receiver side I want to generate URL dynamically.
    To proceed step by step, I started with passing a constant URL to Dynamic configuration UDF.
    mapping:
    Dynamic conf. UDF
    Channel Configuration:
    From testing, I found that channel always takes the url given in Target URL field and dynamic URL in TserverLocation is been ignored by the channel.
    That is dynamic configuration is not working completely.
    I went through a lot of blogs and also tried a lot of trial and error methods, but none helped. Every thing I configured looks perfect for me, but still not working. I don't understand where I went wrong. Please help me.

    Hi Experts,
    I am facing similar issue,
    URL --> UDF --> @dynamicvariable
    I have created a variable underparent node eg: DESADV-->dynamicvariable
    passed complete URL to UDF, below is the UDF
    & configured SOAP Receiver Channel as well. This is IDOC to IDOC scenario, using IDOC_AAE on sender side and SOAP on receiver in single stack.
    --> Checked ASMA
    --> Checked Variable Transport Binding and given "TServerLocation" without quotes in XHeaderName1
    --> Target URL: http://
    But when I am running this interface, nothing is coming in Dynamic configuration.
    Ref: Message Log:
    MM and OM is also perfect in ESR.
    Any suggestions? Please advice.
    Regards
    Singh

  • Using TEST mode in sender file channel to trigger jdbc receiver channel

    Hi
    In order to call a jdbc receiver channel every 15 minutes I intended to use a file sender channel as a trigger where I set the Processing Mode to TEST. However, I would like to make multiple simultaneous different calls to the jdbc receiver channel, so I have multiple files in the folder, where the file sender channel is listening. Quality of Service in the file sender channel is set to Best Effort as the call is syncroneous.
    However, because the messages in the folder are not deleted, only the first message is being processed no matter whether I choose Processing Sequence "By Date" or "By Name".
    I would like to avoid having to create 15 folders containing one message each, so is there another way of doing it?
    By the way, I redirect the response from the jdbc receiver channel to a different folder, but I think this is irrelevant in this case.
    I use PI 7.11
    /Mikael

    Thanks for your answer, but I would like to avoid using Availability planning.
    Right now I am thinking about using "Advanced selection for source file" and then just specify 14 different folders here each containing one trigger message, but it seems that only the oldest message (if I choose Processing Sequence = Date) or the first message alfabetically (if I choose Processing Sequence = Name) is being processed across the many folders which I think is very weird!

  • SOAP Receiver Channel 2 nodes inactive in Production system

    Hi All,
    We are facing an issue with the SOAP receiver channels in production system. There are 4 nodes which can be seen in the communication channel monitoring and out of which 2 have the status as inactive and the short log says "inactive or never used".
    But the same nodes are active on the sender SOAP channel and all other channels.We have also checked the Status of the SOAP service that is also set to active.
    Now when the server (App server5 in our case) is switched off, which has the 2 active nodes, the messages are not processed since the nodes on the other server are inactive.
    Request you to please help us out in finding out why the nodes are in inactive status only for SOAP receiver channels. Do we need to change any settings at the adapter engine level.
    Thank you.
    Regards,
    Sarvesh Desai
    Edited by: Sarvesh  Nispat Desai on Aug 25, 2010 5:25 PM

    There is an error in reporting the status of SOAP channels. This error has already been fixed by SAP and is available as a fix in higher releases (PI 7.10 and above, latest SPs) .
    The status "inactive or never used" is shown in channel monitoring at the following two times:
    1. After creating a new SOAP channel (sender/receiver) till this channel processes any new message.
    2. After the PI system is restarted, all the SOAP channels show this status, though they are ready to handle any incoming/outgoing messages. The channels continue to display this status till they process any new message.
    In both these situations, the SOAP Channel can handle/process messages successfully. So, kindly ignore this channel status ("inactive or never used") reporting error in channel monitoring. This will not at all hamper the normal functioning of the SOAP channels.
    Hope this answers your query.

  • Webservice secuirty in SOAP receiver channel in PI 7.1

    One of my vendor published a web service which I imported in PI , but he expcets PI to send webservice secuirty with usertoken, so that they can authenticate & authorize.
    How can we implement webservice secuirty with usertoken & password in PI 7.1 on SOAP receiver channel.
    Please let me know your thoughts.

    I mean while message is going out from XI it should pass username & password as a part of SOAP Header. like below
    which I beleive we can call it is as web service security with usertoken
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" >
    <SOAP-ENV:Header xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" >
    <wsse:Security soapenv:mustUnderstand="1" xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" >
    <wsse:UsernameToken>
    <wsse:Username>abcd1234</wsse:Username>
    <wsse:Password type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText" >abcd2009</wsse:Password>
    </wsse:UsernameToken>
    </wsse:Security>
    </SOAP-ENV:Header>
    <SOAP-ENV:Body>

  • File-XI-File:one sender channel, multiple receiver channels on same BS

    Hi !
    We need to send some files from one server to another. On the source, the filenames have a fixed prefix and a timestamp. On the target, the files should have a fixed name (time stamp trimmed). We would like to use one sender channel with the advanced file selection option and for example 3 receiver channels, each channel for each fixed filename. All destination channels are for the same business service. And because we do not need mapping, and want to improve performance, we don't use the repository.
    Is this possible? or because this only a 3 files scenario, we should make it as 3 different scenarios, each with its own sender and receiver channels?
    Thanks,
    Matias

    Hey
    >>But Ahmad, as mentioned in the blog, XI scenario without IR can be used only if it's non xml mesage. Is that right?
    can you please tell me where it says this:)
    is it this line which is confusing you <b>"Contrary to popular believe, the message or document sent thru XI does NOT have to be in XML format"</b> ?
    well it just means that you can send any data(.jpeg,.pdf xml .xls or anything) by doin the bypass scenario.
    IDOC's are something which can give u problems if you dont do IR steps(specially mapping)coz a lot of values need to be hard coded.but suppose ur doing a async File to RFC,then i guess you can do that by using the bypass scenario.
    i won't count on bypass scenarios for all of my requirements,but yeah if both source and target have exactly same data type i will give it a shot,irrespective of the interface i m integrating.
    Thanx
    Ahmad
    Message was edited by:
            Ahmad

Maybe you are looking for

  • Logout/shutdown hangs half way through repeatedly

    When I attempt to logout/restart on my iMac, most of the time all the visible apps close but then the desktop picture doesn't go away and the computer never completes the logout/restart process. I am assuming (perhaps wrongly, since I don't know much

  • Returning a parameter back to UIX app

    Hi I am wondering if I am doing this correctly or if there is a better way. I have created a UIXML page with two choice boxes. The second is populated by the selection of the first by querying a database with the first selection. I have an event that

  • EFI update killed MBA

    Hello, i just installed the latest update for Lion on my MBA. I followed all instructions (power cord attached), but after it shut down, there was a loud error beep and since than i am unable to start it up again. I could really need some advice here

  • Adjusting the timing of a button

    It seems that I used to drag the 2 little vertical to the left or right in order to control where I wanted the slide to pause until the user clicks. I am embarrassed to say that I have fogotten how to do this. When I try to drag the "control point" i

  • Default file opener?

    This questions involves all of the iWork '08 applications. How do I set these applications to be the default application for opening files sent to me? In other words, when I receive a .ppt file and double-click to open, my computer uses Adobe to atte