Pretty Good Privacy (PGP) encryption
Hi,
Can someone give me some info on how Pretty Good Privacy (PGP) encryption works in SAP environment?
Thank you,
Chuong
You can implement it with external commands defined in SM69, then you can call these commands with FM SXPG_COMMAND_EXECUTE.
Feel free to ask for native support for this on this thread : ABAP Wish List
Similar Messages
-
REG: Usage of PGP(pretty good privacy) encryption
Hi all,
I need to use PGP encryption in XI. Can u suggest is it possible or not. If yes can you tell me how can it be done.hi,
PGP Encryption is used to support the transmission of sensitive data to / from third party systems via XI.
Adapter modules are developed to encrypt the file using PGP.
We had a similar requirement where we used PGP encryption.The module was developed using Cryptix OpenPGP which is a Java implementation of the OpenPGP standard.When the module is called in the adapter, it uses the PGP key provided by the party that will receive the encrypted message. This module should be called prior to calling the Sap adapter
Logic Flow/Processing:
1.Read the XML payload and message for getting the needed data.
2.Read the key to be used in the encryption and log the key to be used and the beginning of the encryption.
3.Call the PGP encryption and compression method.
4.Log whether encryption has been successful.
5.Set as payload the message content encrypted, and the principal data.
6.If any error occurs, logs an exception in PGP adapter module and the error reason.
7.Return the message.
regards
kummari -
PGP encryption and decryption in soa suite
Hi,
We have a requriement where bpel process plays the role of encrypting a file using PGP encryption and then it has to be placed onto a SFTP server using an FTP adapter. We would like to know if this can be done using an owsm policy or a seperate java api has to be created for this and invoked in the bpel process. Currently we have a seperate 3rd party tool which does this pgp encryption and it uses ksh shell script. Is there a way where i can invoke this shell script into my bpel process?
I found this note (FAQ (Customization) [ID 105127.1]) in oracle metalink.
How does one run a shell script as a concurrent program?
1: Write the script and call it .prog
Place the script under the bin directory under your applications
top directory.
For example, call the script CUSTOM.prog and place it under
$CUSTOM_TOP/bin
2: Make a symbolic link from your script to $FND_TOP/bin/fndcpesr
For example, if the script is called CUSTOM.prog use this:
ln -s $FND_TOP/bin/fndcpesr CUSTOM
This link should be named the same as the script without the .prog
extension.
It should be in the same directory as the script.
3: Register a concurrent program as described above, using an execution
method of 'Host'
Use the name of your script without the .prog extension as the name
of the executable
For the example above, you would use CUSTOM
4: The script will be passed at least 4 parameters, in $1 through $4
These will be: orauser/pwd, userid, username, request_id
Any other parameters you define will be passed in $5 and higher.
Make sure the script returns an exit status.
But i am ignorant in this area and do not know how the above steps can be executed.
If any of you guys have done pgp encryption in soa 11.1.1.4, please do let me know if there's any way how i can couple pgp encryption into soa suite.
ThanksYou can do it in Java, have a look at this...
http://www.javacodegeeks.com/2011/06/java-pretty-good-privacy-pgp.html
Cheers,
Vlad -
After 10.6 security update 2013-002 PGP encrypted disk won't boot
I ran the latest security update on my very old 17" intel MacBook Pro (It won't boot, so I can't give you the model number). It has PGP encryption installed on it, but I only have my passphrase, not the keys since it's a managed system. Half way through the install, it failed with a cryptic error, and the machine won't boot now. It gets half way through booting, and the screen goes black.
I have booted into single user mode, and ran fsck and applejack, only to get an error about a sibling error, and the hard disk is full.
Is this a PGP issue? Does the latest security update conflict with PGP?
I found this resolution to a similar sounding problem in 2010, but am unsure if this is happening now. Google searching hasn't yeilded anything so far.
http://hints.macworld.com/article.php?story=20101111120329585
Thanks for any help.
MelissaAbout PGP I can't tell; the hint you linked (and the suggested fix) might still be valid:
PGP recommends folks to decrypt their drives first, update to 10.6.5 and then re-encrypt.
this sounds as a general recommendation.
However fsck reported a sibling error (an invalid link sibling error I presume) and that's not fine. Afaik, Disk Utility can't fix it; DiskWarrior hopefully will. I quote from Alsoft Support Database:
Question
Is DiskWarrior capable of repairing an "Invalid Sibling Link" error?
Answer
This is an error you definitely don't want. It indicates that parts of your directory, and therefore some of your files and folders, are inaccessible.
Mac OS Standard (HFS) and Mac OS Extended (HFS Plus) disk directories have a very complex structure. Each file or folder (item) on a disk has an entry in the disk's directory. These entries are in order of enclosing folder and then item name. This is similar to a yellow pages directory being ordered by type of business and then business name. Just like a yellow pages directory, the disk directory has pages except that its pages are called nodes. Unlike the yellow pages, nodes are dynamic and change as you add and delete items. It's sort of like a realtime yellow pages.
Imagine that the pages of the yellow pages are not in order and at the bottom of each page it says "Continued on page n," where n is the page that contains the next set of listings for the particular type of business that you're looking up. Well nodes are not arranged in order and each node has a reference, or link, to the next node that contains the next set of ordered items. This link is what is referred to as the sibling link.
A sibling link error is a bad link to another node. Either the link refers to the wrong node or it refers to an invalid node. As I said, a sibling link error makes some of your items inaccessible and can even prevent a disk from mounting. Sibling errors are notoriously difficult for some of the patching type of disk repair utilities to repair. Sometimes the repairs fail and the directory is damaged further. If a disk with a sibling link error is still mountable, I would advise backing up the accessible files and folders on the disk before attempting to repair it with that type of disk repair utility.
I'm not really sure DiskWarrior will work on a PGP encrypted disk. According to a few old Google matches, it should. See e.g.:
http://kb.mit.edu/confluence/pages/viewpage.action?pageId=4263350
but according to more recent ones, it won't:
https://discussions.apple.com/thread/2719460?start=0&tstart=0
It seems you're out of luck even with Safe Boot (from PGP Whole Disk Encryption Command Line User's Guide):
The Mac OS X Safe Boot feature does not work on a boot disk that has been whole disk encrypted; if you hold down the Shift key to enter Safe Boot, the system will fail to boot after authenticating at the PGP BootGuard screen.
So, while you're waiting for some more knowledgeable advice, you might backup your data to an external drive while booted in single user mode. There are many how-tos out there; I think this one is pretty clear:
http://jsalovaara.com/blog/backing-up-files-to-a-usb-drive-using-single-user-mod e.html
Hope this helps. -
PGP Encryption support in SOA Suite 11g
Hi,
Looking for PGP encryption support in SOA Suite 11g as we have a requirement to encrypt the file using PGP encryption and send over SFTP.
I already went through some of the forums posts but they are date back to 2007, so just wanted to confirm if there is anything in recent releases of SOA Suite.
- FTP adapter support or
- OWSM suppport.
As far as i know, we have to install some PGP tool and write a script to encrypt/decrypt and call the script from BPEL. this conclusion is based on a stmt given in the OWSM 10g book by sitaraman.
Please provide your insights on this.
Thanks
SivaHi Siva,
I don't think still there is any support for PGP in Oracle SOA. You may use java for PGP encryption/decryption and transfer externally encoded messages over SFTP.
Please refer -
Re: PGP Encryption/Decryption
PGP Encryption in B2B
Regards,
Anuj -
How to configure PGP Encryption in B2B Console including jar addition ?
Hi Guys,
I have the following questions with respective PGP Encryption.Can any one clarify on this?
I have PGP Encryption jave code which does not implement CallOut Interface and which encrypt's a file
1. is it mandatory that PGP Java code having a class to implement CallOut Interface ? if yes which methods i need to implement and necessary parameters required ?
2. In what way i can add jar to the server ? Please explain the format of call out jar path for windows and linux?
3. how can i check whether the pgp jar is loaded or not ?
4. Can any one explain the steps to configure PGP Encryption in B2B Console?
Edited by: 972723 on Jan 22, 2013 2:49 AMHow to configure Call out in B2B ?
-
B2B add on for PGP encryption in SAP PI 7.11
Hi Folks,
I see that we can implement PGP encrytption in PI 7.11 SP08, Can anyone please provide me with the B2B add on install link from SAP market place which can enable SFTP adapter and PGP encryption.Hi Kalyan
OSS note 1695521 provides the details of the download location. Below is a snippet of the note.
You can download the PI secure connectivity add on 1.0 at http://service.sap.com/swdc > Installation and Upgrades > Browse our Download Catalog > SAP NetWeaver and complementary products > PI SFTP PGP ADDON > PI SFTP PGP ADDON 1.0
You can download SP1,corresponding patches for SP0 and SP1 of PI secure connectivity add on 1.0 at http://service.sap.com/swdc > Support Package and Patches > Browse our Download Catalog > SAP NetWeaver and complementary products > PI SFTP PGP ADDON > PI SFTP PGP ADDON 1.0-->Choose the component Type
Rgds
Eng Swee -
Hi All,
We need to do FTP some files from remote server and files are to be pgp encrypted or decrypted.Can you please tell is there some way to use pgp encryption in FTP adapter. If yes, please provide some link for documentation.
or shall we do ftp using some other program which support pgp encryption and then our bpel process should read file using file adapter.
Please suggest better option out of both.
Thanks.Hi Ram,
Is the scenario same in Oracle SOA Suite11g latest release as well?
If we have to go for OpenPGP tool manual intervention is requried to encrypt the file which may not be possible in our scenario.
Thanks
Siva -
File Name in the Send Port with PGP Encryption
Hello,
The File Name in the Send Port should be set with the mask like ABC.txt.pgp. Since I have used the PGP Encryption Component it is generating the File name like ABC.pgp.txt.pgp. But what I need is just the ABC.txt.pgp. How can be this be done. Any help is
greatly appreciated.
ThanksWhat you are seeing is the expected behavior. If you are referring to this:
https://code.msdn.microsoft.com/windowsdesktop/BizTalk-Sample-PGP-ebcbc8b2
or one of it's derivatives, it will internally modify FILE.ReceivedFileName to append .pgp if that property is set.
So, if you use just %SourceFileName%, you will likely get the desired result. Otherwise, you will have to explicitly set FILE.ReceivedFileName to ABC.txt somewhere before the PGP component.
You can also modify the source code to remove this behavior. -
Linux script for PGP encryption
Hello,
We are trying to do PGP encryption by giving the OS command in the File adapter. Can somebody provide me the exact linux script that we should use to do PGP encryption?
Note: We have XI-3.0 on LINUX.
Promise points for helpful answers.
Regards,
Raji.Hi Rajashree
PGP Encryption is used to support the transmission of sensitive data to / from third party systems via XI.
Adapter modules are developed to encrypt the file using PGP.
We had a similar requirement where we used PGP encryption.The module was developed using Cryptix OpenPGP which is a Java implementation of the OpenPGP standard.When the module is called in the adapter, it uses the PGP key provided by the party that will receive the encrypted message. This module should be called prior to calling the Sap adapter
Logic Flow/Processing:
1.Read the XML payload and message for getting the needed data.
2.Read the key to be used in the encryption and log the key to be used and the beginning of the encryption.
3.Call the PGP encryption and compression method.
4.Log whether encryption has been successful.
5.Set as payload the message content encrypted, and the principal data.
6.If any error occurs, logs an exception in PGP adapter module and the error reason.
7.Return the message.
Go through This links
Is there any FTP API available from SAP?
Send Text file to FTP in binary mode with PGP encryption
http://www.webmethods.com/meta/default/folder/0000007429
Converting IDOC to XML
XI implementation
http://www1.webmethods.com/PDF/webMethods_for_SAP-wp.pdf
Current versions found at http://www.cryptix.org and http://www.bouncycastle.org.
http://www.bouncycastle.org/documentation.html
If you want to use the unix script on windows then you need cygwin. Take the shell executable and cygwin.dll and copy them to another machine and try out.
Else you write an .exe or a batch file where you will give your PGP command to encrypt and decrypt and execute it from the OS level in your adapter. Check my answer in this thread:
Re: PGP Encription
Might be useful.
PGP Encription
Re: PGP Encription
\Re: triggering encryption script with XI
Pls rewards if useful -
I bought my Mac Air 13' in August. Black screen problems constantly happens. I asked some of my friends who also use Air. They share the same experience. Overall, it is a pretty good computer. But it bothers me when I do work and it suddenly goes black. What should I do about it?
without more information, I assume you mean a blackout from sleep issue.
Go to system preferences > energy settings > raise the "turn display off" setting up to as needed, say 5 mins. or 10 mins.
AND ...
unchecked the "Put hard disks to sleep when possible" in both the battery and power adapter tabs.
test it and check back -
PGP Encryption Scenario for a Proxy to File Scenario.
I have a scenario where an outbound proxy from R/3 system is extracting some hr related info type data and sending it to XI system. The XI system is required to convert the data into a flat file format and encrypt the data using PGP.
<b>R/3 -
Proxy -
> XI System -
File Encrypted----
> External System.</b>
Need some inputs from experts how to set up the scenario. In the file adapter we can trigger scripts at the O/S level to encrypt the file.
What I would like to know what the configurations that are required to get the scenario working namely,
1. Where do we need to install the PGP software is it on the FTP server or XI server ?
2. How will the scripts be executed by the Receiver File adapter ?Hi Indranil
Here is some info on PGP/XI
<<<<1. Where do we need to install the PGP software is it on the FTP server or XI server ?
<i>
XI server</i>
Also go thru the following excerpt
XI dont support PGP encryption and decryption. I have done some interfaces using PGP encryption at OS level and then using XI. Install the software in XI and write the OS command for encryption and decryption at OS level. Call this command in File adapter after or before message processing.
PGP Encryption:
We get the normal text file from R3. Then we have written two XI interfaces here. My first interface will pick from R3 and encrypts the file and drops it in another location of R3. In this interface I have given OS command before message processing. This will pick the file and do the encryption.
My second interface will pick the encrypted file from R3 and do a simple FTP to the Bank.
This is exactly opposite for decrypting the file from Bank.
<i>Thanks 2 Satish Reddy</i>
Regards
krishna
<i>Note:Reward points if helpful</i> -
How can i send PGP encrypted file from PI to the receiver
Hi experts,
I am unable to send the PGP encrypted file from PI to the receiver. where the Clients sends the file using PGP encryption,
But i am trying to send the same with PI. But i am not able to send the same can you please help me out to get the same incorporated using PI 7.1
and sends to the receiver ( the rceiver would be FTP ).
Regards,
Amruthhi,
You can write an adapter module to encypt your payload before sending to Reciever:
/people/dijesh.tanna/blog/2008/09/15/sap-pi-integrating-macafee-e-business-server-with-sap-pi-70-for-pgp-encryptiondecryption
http://www.bouncycastle.org/documentation.html
http://www.cryptix.org/
http://aedaptive.com/index.php/solutions/pgp-for-sap-netweaver
http://www.pgpi.org/doc/pgpintro/
PGP encryption: Do we need to write adapter module?
If you are getting PGP file from sender and want to send this file to target without any mapping transformation you can use this blog:
/people/william.li/blog/2006/09/08/how-to-send-any-data-even-binary-through-xi-without-using-the-integration-repository
Thanks. -
Need hlep for PGP Encryption for delimited file transfer using B2b
I have a requirement to read the PGP encrypted delimited file from partner and decrypt it to process. Can any body tell me how can I do this in b2b. I really appreciate the help
Better read it as a binary document and pass it to the back-end for further processing (decryption and processing). If you want to the decryption at B2B layer itself then use the java callout feature -
http://docs.oracle.com/cd/E23943_01/user.1111/e10229/callouts.htm#CHDEFBDG
Regards,
Anuj -
Hi,
Is there anyone use PGP encryption and decryption in PLSQL?
can it be done?
Thanks
Vincentif I recall, PGP allows you to choose different methods of encryption.
are you asking for any particular type in general?
as PL/SQL is a turing complete language, the answer would have to be 'Yes' to your question, but
you may find this useful:
http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/d_obtool.htm
Maybe you are looking for
-
Dear Experts, can someone shed som light on my topic below. I am using SCM 7.0 and deployment optimisation. I have a scenario whereby the MAD date of the confirmed distribution receipt is 1 day later than is required thereby creating an alert. The
-
Installing 9i on a Windows 98 computer
Is 9i really running on Windows98? I just made the installation but found that "wfnvg.ocx", "mmdx32.ocx" and "oip.dll" could not be registered not even manually. Will my database work? Thank you!
-
Error:Unable to interpret "TABLE".
When I use BTE, There is an error in FM Z_WRITE_TO_QUEUE in R/3. FUNCTION Z_WRITE_TO_QUEUE. ""Local interface: *" IMPORTING *" REFERENCE(I_DATASOURCE) TYPE ROOSOURCE-OLTPSOURCE *" TABLES *" I_T_DATA OPTIONAL TYPE-POOLS: sbiwa. DATA:
-
Looking for some training on the 2500 series controller and 1142 or 1040 AP's preferably. I have called all the Cisco numbers I can find with no luck. TIA, Eric
-
Order related or Delivery related
Hi all, We do not a a shipping module on SAP (not sure if that is the correct term) but what I mean is that all of the AR invoices we generate should be order related and none delivery related. However, we have some billing documents that are recorde