PGP - XI 3.0

Hi All,
I am currently working on a scenario where secure data from ECC needs
to be sent to one of the third party via XI and Seeburger.
The flow would be : SAP ECC -> XI 3.0 -> Seeburger -> Target system
A encrypted txt file using PGP needs to be sent from XI to
Seeburger.Seeburger will push this file to the target system.Target
system will decrypt the file.
I would like to know as how can I proceed here once i generate the
.txt file in Interface mapping.
Can someone please explain me the detailed steps which needs to be
followed here for PGP.
What are the things like keys which needs to be shared with the target system.
<<Text removed>>
Thanks & Regards,
RK
Edited by: Matt on Sep 18, 2011 4:38 PM

Hi Debashish,
Thanks for the link.
I have started to write a JAVA Mapping for the requirment.
I have generated one public and private key pair with the passphrase.
Also imported the keys in the project in Eclipse.
I have added the 2 jars    1. bcprov-ext-jdk14-145.jar and    2. bcpg-jdk14-145.jar in my jre6\lib\ext folder.
Also imported the jars in project.
When i try to execute program i am getting an error unknown object in stream: 47
Any idea as why this error is occuring.
Have I missed anything here.
Log :
cryption.java:76)
java.lang.Exception: java.lang.Exception: java.io.IOException: unknown object in stream: 47
     at com.sap.pgpencrypt.PGPCrypto.encrypt(PGPCrypto.java:184)
     at com.sap.pgpencrypt.PGPCrypto.encrypt(PGPCrypto.java:107)
     at com.sap.pgpencrypt.PGPEncryption.execute(PGPEncryption.java:56)
     at com.sap.pgpencrypt.PGPEncryption.main(PGPEncryption.java:76)
Helpful answers will be rewarded points.
Regards,
RK

Similar Messages

Transfer Excel file to external FTP server via PGP

Hi SDN!
I have build an scheduled report to generated an Excel-file from an internal table and saved it in the database. Now my task is to upload it to an external FTP Server of a partner company. The File contains sensible data and shall be encrypted via PGP.
How can i upload to an external FTP server and before that, encrypt the file with PGP? I appreciate any help and look forward to reward some great posts.
Thanks for your help!
Edited by: Steffen Wieprecht on Aug 7, 2008 1:00 PM

I found a solution myself, maybe someone is interrested:
I installed a WS FTP Professional on a Server.
Onto this server I wrote the files that have to be ftp-uploaded into one specific folder.
A Perl Script in the scheduled tasks of the machine checks if a new file is in the folder and starts the upload.
In WS FTP the site upload is defined with all PGP Keys so they are store secure.
This solution can be used by any programming language that is able to write files in the upload folder.
Best Regards,
Steffen

PGP Encryption support in SOA Suite 11g

Hi,
Looking for PGP encryption support in SOA Suite 11g as we have a requirement to encrypt the file using PGP encryption and send over SFTP.
I already went through some of the forums posts but they are date back to 2007, so just wanted to confirm if there is anything in recent releases of SOA Suite.
- FTP adapter support or
- OWSM suppport.
As far as i know, we have to install some PGP tool and write a script to encrypt/decrypt and call the script from BPEL. this conclusion is based on a stmt given in the OWSM 10g book by sitaraman.
Please provide your insights on this.
Thanks
Siva

Hi Siva,
I don't think still there is any support for PGP in Oracle SOA. You may use java for PGP encryption/decryption and transfer externally encoded messages over SFTP.
Please refer -
Re: PGP Encryption/Decryption
PGP Encryption in B2B
Regards,
Anuj

I have a big problem with Lion and PGP. After upgrading from snow leopard to lion I cannot access my PGP drive which was generated under snow leopard. PGP does not start but gives a notion that lion cannot work with my PGP version. Solution?

After upgrading from Snow Leopard to Lion I cannot access a PGP drive which was generated under snow leopard. PGP does not start. When I try to start I just receive a message that Lion cannot work with PGP. How can I now access important and confifential informatio which I have stored in PGP (snow leopard). Do I have to move back to snow leopard. If so, how can I do this?

If you have this product,
http://www.symantec.com/business/support/index?page=content&id=TECH165159
you have to go back to Snow Leopard.
To re-install SL, back up your home directory, format and re-install.

After 10.6 security update 2013-002 PGP encrypted disk won't boot

I ran the latest security update on my very old 17" intel MacBook Pro (It won't boot, so I can't give you the model number). It has PGP encryption installed on it, but I only have my passphrase, not the keys since it's a managed system. Half way through the install, it failed with a cryptic error, and the machine won't boot now. It gets half way through booting, and the screen goes black.
I have booted into single user mode, and ran fsck and applejack, only to get an error about a sibling error, and the hard disk is full.
Is this a PGP issue? Does the latest security update conflict with PGP?
I found this resolution to a similar sounding problem in 2010, but am unsure if this is happening now. Google searching hasn't yeilded anything so far.
http://hints.macworld.com/article.php?story=20101111120329585
Thanks for any help.
Melissa

About PGP I can't tell; the hint you linked (and the suggested fix) might still be valid:
PGP recommends folks to decrypt their drives first, update to 10.6.5 and then re-encrypt.
this sounds as a general recommendation.
However fsck reported a sibling error (an invalid link sibling error I presume) and that's not fine. Afaik, Disk Utility can't fix it; DiskWarrior hopefully will. I quote from Alsoft Support Database:
Question
Is DiskWarrior capable of repairing an "Invalid Sibling Link" error?
Answer
This is an error you definitely don't want. It indicates that parts of your directory, and therefore some of your files and folders, are inaccessible.
Mac OS Standard (HFS) and Mac OS Extended (HFS Plus) disk directories have a very complex structure. Each file or folder (item) on a disk has an entry in the disk's directory. These entries are in order of enclosing folder and then item name. This is similar to a yellow pages directory being ordered by type of business and then business name. Just like a yellow pages directory, the disk directory has pages except that its pages are called nodes. Unlike the yellow pages, nodes are dynamic and change as you add and delete items. It's sort of like a realtime yellow pages.
Imagine that the pages of the yellow pages are not in order and at the bottom of each page it says "Continued on page n," where n is the page that contains the next set of listings for the particular type of business that you're looking up. Well nodes are not arranged in order and each node has a reference, or link, to the next node that contains the next set of ordered items. This link is what is referred to as the sibling link.
A sibling link error is a bad link to another node. Either the link refers to the wrong node or it refers to an invalid node. As I said, a sibling link error makes some of your items inaccessible and can even prevent a disk from mounting. Sibling errors are notoriously difficult for some of the patching type of disk repair utilities to repair. Sometimes the repairs fail and the directory is damaged further. If a disk with a sibling link error is still mountable, I would advise backing up the accessible files and folders on the disk before attempting to repair it with that type of disk repair utility.
I'm not really sure DiskWarrior will work on a PGP encrypted disk. According to a few old Google matches, it should. See e.g.:
http://kb.mit.edu/confluence/pages/viewpage.action?pageId=4263350
but according to more recent ones, it won't:
https://discussions.apple.com/thread/2719460?start=0&tstart=0
It seems you're out of luck even with Safe Boot (from PGP Whole Disk Encryption Command Line User's Guide):
The Mac OS X Safe Boot feature does not work on a boot disk that has been whole disk encrypted; if you hold down the Shift key to enter Safe Boot, the system will fail to boot after authenticating at the PGP BootGuard screen.
So, while you're waiting for some more knowledgeable advice, you might backup your data to an external drive while booted in single user mode. There are many how-tos out there; I think this one is pretty clear:
http://jsalovaara.com/blog/backing-up-files-to-a-usb-drive-using-single-user-mod e.html
Hope this helps.

How to configure PGP Encryption in B2B Console including jar addition ?

Hi Guys,
I have the following questions with respective PGP Encryption.Can any one clarify on this?
I have PGP Encryption jave code which does not implement CallOut Interface and which encrypt's a file
1. is it mandatory that PGP Java code having a class to implement CallOut Interface ? if yes which methods i need to implement and necessary parameters required ?
2. In what way i can add jar to the server ? Please explain the format of call out jar path for windows and linux?
3. how can i check whether the pgp jar is loaded or not ?
4. Can any one explain the steps to configure PGP Encryption in B2B Console?
Edited by: 972723 on Jan 22, 2013 2:49 AM

How to configure Call out in B2B ?

B2B add on for PGP encryption in SAP PI 7.11

Hi Folks,
I see that we can implement PGP encrytption in PI 7.11 SP08, Can anyone please provide me with the B2B add on install link from SAP market place which can enable SFTP adapter and PGP encryption.

Hi Kalyan
OSS note 1695521 provides the details of the download location. Below is a snippet of the note.
You can download the PI secure connectivity add on 1.0 at http://service.sap.com/swdc > Installation and Upgrades > Browse our Download Catalog > SAP NetWeaver and complementary products > PI SFTP PGP ADDON > PI SFTP PGP ADDON 1.0
You can download SP1,corresponding patches for SP0 and SP1 of PI secure connectivity add on 1.0 at http://service.sap.com/swdc > Support Package and Patches > Browse our Download Catalog > SAP NetWeaver and complementary products > PI SFTP PGP ADDON > PI SFTP PGP ADDON 1.0-->Choose the component Type
Rgds
Eng Swee

PGP Encryption in FTP Adapter

Hi All,
We need to do FTP some files from remote server and files are to be pgp encrypted or decrypted.Can you please tell is there some way to use pgp encryption in FTP adapter. If yes, please provide some link for documentation.
or shall we do ftp using some other program which support pgp encryption and then our bpel process should read file using file adapter.
Please suggest better option out of both.
Thanks.

Hi Ram,
Is the scenario same in Oracle SOA Suite11g latest release as well?
If we have to go for OpenPGP tool manual intervention is requried to encrypt the file which may not be possible in our scenario.
Thanks
Siva

PGP error in PI 7.4 - BouncyCastle Provider not found

Hi ,
I am working on PGP encryption in SAP PI7.4 .
I have followed below link :
PGPEncryption Module: A Simple How to Guide
Using PGP in Process Integration
But while doing end to end scenario it is givingg error :
Exception caught by adapter framework: Could not process message, BouncyCastle Provider not found (java.security.NoSuchProviderException: unable to find provider.)
In my sandbox it was woking fine but when trying to do the same thing in Dev box it staretd giving error .
Can somebody help me .
Thanks ,
Anurag

Hi Anurag
You should check if the Secure Connectivity add on was deployed correctly in your Dev system. Maybe there are some missing JAR or SCA files.
Refer to the Secure connectivity add-on installation guide on how to download and deploy the SCA files. You can find this guide on the Service Marketplace (search for PI SFTP PGP ADDON.)
You can also refer to the following How-to guide on checking the installation via NWA. The guide is for SFTP but you can follow the same steps in page 2 to check.
How To Configure SFTP Adapter in SAP PI
Rgds
Eng Swee

Problem in PGP signature of a mirror - an administrative problem

i know this is an administrative affair and i am not the administrator of our network.
i asked our network administrator to launch a mirror of arch in our university and he kindly did it and it is know listed in arch mirror list. the problem is that when i update the package list it gives me error regarding PGP signature and i can not update or install package. when i update the database using another mirror, it works fine and even i can update the packages using our mirror. so the problem is only the PGP signature of our mirror.
since our admin does not work with arch, i decided to ask it here and pass him the solution.
the address of our mirror is : http://mirror.yazd.ac.ir/arch/
and here is the output of pacman -Syyu
[root@civil-cfd ~]# pacman -Syyu
error: GPGME error: No data
error: GPGME error: No data
error: GPGME error: No data
:: Synchronizing package databases...
core 108.9 KiB 111K/s 00:01 [######################] 100%
error: GPGME error: No data
error: failed to update core (invalid or corrupted database (PGP signature))
extra 1482.3 KiB 138K/s 00:11 [######################] 100%
error: GPGME error: No data
error: failed to update extra (invalid or corrupted database (PGP signature))
community 2.1 MiB 139K/s 00:16 [######################] 100%
error: GPGME error: No data
error: failed to update community (invalid or corrupted database (PGP signature))
archlinuxfr 12.2 KiB 197K/s 00:00 [######################] 100%
error: database 'core' is not valid (invalid or corrupted database (PGP signature))
error: database 'extra' is not valid (invalid or corrupted database (PGP signature))
error: database 'community' is not valid (invalid or corrupted database (PGP signature))

Allan,
i did not change the options in pacman.conf file. and note that when i disable this mirror in "/etc/pacman.d/mirrorlist" and use other mirror, the commands work well. so the problem is related to this mirror.
ewaller,
it is a pure Arch installation not Antergos or any other branch of Arch.
Last edited by hadian (2014-04-06 07:55:29)

REG: Usage of PGP(pretty good privacy) encryption

Hi all,
I need to use PGP encryption in XI. Can u suggest is it possible or not. If yes can you tell me how can it be done.

hi,
PGP Encryption is used to support the transmission of sensitive data to / from third party systems via XI.
Adapter modules are developed to encrypt the file using PGP.
We had a similar requirement where we used PGP encryption.The module was developed using Cryptix OpenPGP which is a Java implementation of the OpenPGP standard.When the module is called in the adapter, it uses the PGP key provided by the party that will receive the encrypted message. This module should be called prior to calling the Sap adapter
Logic Flow/Processing:
1.Read the XML payload and message for getting the needed data.
2.Read the key to be used in the encryption and log the key to be used and the beginning of the encryption.
3.Call the PGP encryption and compression method.
4.Log whether encryption has been successful.
5.Set as payload the message content encrypted, and the principal data.
6.If any error occurs, logs an exception in PGP adapter module and the error reason.
7.Return the message.
regards
kummari

PGP Encryption using Module in PI 7.1

Hi Experts,
We have devoloped a module for PGP Decryption and deployed as a module in our PI 7.1 server .
We have placed the public and private key certificates(Privatekey.txt,PubKey.txt) and jar files (bcpg-jdk15-1.44.jar,bcprov-ext-jdk14-146.jar,bcprov-jdk14-146.jar ) in the below path of our PI FTP server .
"/usr/sap/<SID>/DVEBMGS03/exe/sapjvm_5/jre/lib/ext"
In Module while reading the private key file it is failing to read and going to else block and throwing "Key is null"
secretkeylocation = moduleContext.getContextData("SecretKeyLocation"); //Reading the path dynamically from channel
try {
            iinKey = getClass().getResourceAsStream(secretkeylocation);
                  if(inKey == null)
                     throw new ModuleException("$$$$ key is null $$$$$");
NOTE:We have tried placing the pblic and private key certificates in different folder .But faced same issue again.
Above scenario we have devoloped using java mapping .Here it worked successfully
String privateKeyPath = "/com/sap/pgp/secring.skr";   //placed certificates here
inKey = getClass().getResourceAsStream(privateKeyPath); //Reading the file
Could you plz sugest ?

This was fixed by using bufferreader and converting it to inputstream

Java.lang.NullPointerException while using PGP module in SFTP receiver

Hi Experts,
We are trying out newly installed PGP module on SAP PI 711 SP10.
Scenario : SFTP to SFTP
While we are trying to encrypt the message in the SFTP receiver, we get the following error.
nested exception is: javax.ejb.EJBException: (Failed in component: sap.com/com.sap.aii.af.app, BC-XI-CON-AFW) Exception raised from invocation of public com.sap.aii.af.lib.mp.module.ModuleData com.sap.aii.af.app.endpoint.ModuleProcessorExitBean.process(com.sap.aii.af.lib.mp.module.ModuleContext,com.sap.aii.af.lib.mp.module.ModuleData) throws com.sap.aii.af.lib.mp.module.ModuleException method on bean instance com.sap.aii.af.app.endpoint.ModuleProcessorExitBean@6437822b for bean sap.com/com.sap.aii.af.app*xml|com.sap.aii.af.ejb.jar*xml|ModuleProcessorExitBean in application sap.com/com.sap.aii.af.app.; nested exception is: java.lang.NullPointerException: while trying to invoke the method com.sap.engine.interfaces.messaging.api.Message.getMessageKey() of an object loaded from local variable 'msMessage'

Thanks Hareesh,
ya that "callsapadapter" was the culprit. It comes by itself, Once I removed that PGP was working fine.

File Name in the Send Port with PGP Encryption

Hello,
The File Name in the Send Port should be set with the mask like ABC.txt.pgp. Since I have used the PGP Encryption Component it is generating the File name like ABC.pgp.txt.pgp. But what I need is just the ABC.txt.pgp. How can be this be done. Any help is
greatly appreciated.
Thanks

What you are seeing is the expected behavior. If you are referring to this:
https://code.msdn.microsoft.com/windowsdesktop/BizTalk-Sample-PGP-ebcbc8b2
or one of it's derivatives, it will internally modify FILE.ReceivedFileName to append .pgp if that property is set.
So, if you use just %SourceFileName%, you will likely get the desired result. Otherwise, you will have to explicitly set FILE.ReceivedFileName to ABC.txt somewhere before the PGP component.
You can also modify the source code to remove this behavior.

SEEBURGER AS2 and EDI adapters, PGP Avalanche adapter

Hi,
Kindly anybody can provide the information/links/documentation/PDFs on SEEBURGER AS2 and EDI adapters, PGP Avalanche adapter.
Thanks in advance,
Jogula Ramesh

When u install SeeburgerBIC mapper on ur machine, the below location will contain all the required manuals..
C:\Program Files\Seeburger\CPG EDI Adapter\manuals
You can seach SDN weblogs for Seeburger Adapter details if u don't have the software..
Below is the starting Seeburger Adapter Series weblogs..
/people/prateek.srivastava3/blog/2009/08/01/seeburger--part-1--the-basics
-SM

Encrypt and Decrypt files using PGP and GPG

Dear members, We have a customer that need to process files received through sFTP, FTPs and FTP over SSL encrypted with PGP and GPG methods.
We Know that those encryption Method are not supported out of the box in Oracle SOA Suite and WCC but We need to Know if some of you have some workaround about that, maybe using a valve in FTP adapter, B2B or any other method in WCC.
Thanks in advance

>
Meiying Yang wrote:
> I have scenarions FTP-->ABAP proxy and ABAP proxy --> FTP. I need to put and get encrypted files to and from FTP server. Does anybody know how I can decrypt file when I get it from FTP server and encrypt file before I send to FTP server? Thanks.
Hi,
Have a look at these blogs.It would be helpful.
1. SAP XI/PI Encode Outgoing Payload using Adapter Module
/people/farooq.farooqui3/blog/2008/09/24/sap-xipi-encode-outgoing-payload-using-adapter-module
2. Decode Base64 Incoming Encoded information in SAP XI/PI using Java Mapping
/people/farooq.farooqui3/blog/2008/05/22/decode-base64-incoming-encoded-information-in-sap-xipi-using-java-mapping
Regards,
Chandra

PGP - XI 3.0

Similar Messages

Maybe you are looking for