RFC to HTTP Synchronous and SSL encryption

I have the a Scnario RFC --> XI ---> HTTP with responce coming back from HTTP to xi and then in turn will go back to SAP.
so it is like : RFC to XI and then To HTTP application at BANK partner
but my case more complex because before i send the message to the web application over HTTP i need to encrypt the message and communicate with the web application of the bank, so i wonder how can we implement SSL to handshake with the bank successfully and how to encrypt the xml before i send the message to the bank ????
also one more interesting question is : when i send the data to the bank over HTTP they asked me to pass it as an arugment...so what does that mean and how can i send data as an argument inside the HTTP request ??
so in this case do i have to use HTTP adapter or SOAP adapter ????
please help me out guys and thanks in advance

Hi,
use the HTTP adapter.
You have to install the SAP crypto lib to enable the HTTPS service in PI.
Afterwards you have to store the SSL certificates and the certificate chain in PI (TX STRUST).
Argument/parameter: eg. www.xyz.com/script.asp?user=peter
Cheers,
André

Similar Messages

RFC To HTTP Synchronous with SSL Encryption

Hallo
I have a Scenario RFC --> XI ---> HTTP with responce coming back from HTTP to xi and then in turn will go back to SAP Synchronously.
so it is like : RFC to XI and then To HTTP application at BANK partner
I know the basic steps of how to import the RFC and how to create the Data Type for HTTP request and response and doing interface mapping for request message and response message.
but my case is more complex because before i send the message to the web application over HTTP i need to encrypt the message and communicate with the web application of the bank, so i wonder how can we implement SSL to handshake with the bank successfully and how to encrypt the xml before i send the message to the bank ????
also one more interesting question is : when i send the xml file to the bank over HTTPs i have to pass only the encrypted part of the xml file as an arugment of the http body...so what does that mean and how can i send data as an argument inside the HTTP request ??
please help me out guys and thanks in advance
Edited by: Tarek Atassi on Jun 22, 2010 8:04 AM

check this guide:
http://help.sap.com/saphelp_nwpi711/helpdata/en/f7/c2953fc405330ee10000000a114084/frameset.htm

RFC to HTTP (Async) and HTTP to RFC (Async)

Guys,
I have one scenario.
RFC need to be Executed (Async) to Fetch a XML file at one location.
Say. www.onecompany.com/details.xml
How should I Proceed.?
Which adapter should I use HTTP or SOAP.
Should I have combination of RFC to HTTP and the HTTP to RFC.
Kind of confuse.
Please help.
BD.

Ok,
i am doing it in the way you suggested. (syncronous)
i have following problems.
1. How to configure the Reciver HTTP Adapter.
2. What should I use in Address Type.
HTTP Destination or URL Address.
3. If I use HTTP Destination , The length of the field is very short to accomodate complete address.
4. If I use URL address, what should I put in all the fields , like Target host, Service Number, path.
I have URL , something like this, www.yahoo.com/exchangerates.xml
I dont know what to put in Target Host, service name and host.
Please help.

Configuration SAP EP systems in HTTPS and SSL

Hi,
Can anyone tell me the regarding the configuration SAP EP systems in HTTPS and SSL.
The scenario is Client -->Application gateway( Web Dispatcher) -->EP6
Regards,
Moulinath Ray

Hi,
I am giving to you the steps we do for our securization (EP 7.0):
Prerequisites:
-Download SAP Cryptographic ToolKit at http://service.sap.com/ swdc and -> SAP Crypto-graphic Software -> SAP JAVA CryptoToolkit (J2EE Engine as of Release 6.30)
-Unzip it with SAPCAR
Logon in SDM and deploy the file
Check in Visual Admin -> Dispatcher/Server -> Libraries -> core_libs iaik_jce.jar is included
Loof for SSL Service in Config Tool in Server and Dispatcher, it should be "always"
Steps:
-Asking for a certificate
Visual Admin -> Cluster -> Server (central instance ) -> Services -> Key storage -> Service_ssl -> Create
Fill in all the data, and be careful with the common name:
-It shouldn´t have "http" or "https" on it
-It shouldn´t have port number on it
For example: "https
www.myportal.domain:port", the common name should be "www.myportal.domain"
Visual Admin -> Key Storage -> service_ssl -> Select your certificate and u201CGenerate CSR Requestu201D
Send the file to a CA
-Importing the validated certificate:
Visual Admin -> Key Storage -> Import CSR Response
In each Server, under SSL Provider, assign the certificate to port 50001, in each Dispatcher
Now, the portal is secure, and you can check it now.
A last step would be export the certificate and send it to your Network Team, so they can export it in the load balancing server, reverse proxy, etc.
You can have a look at this link:
http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/frameset.htm
Some of the threads link:
/message/5568001#5568001
/thread/853387
Regards,
Niraj
Edited by: Niraj Kumar on Jan 22, 2009 3:59 PM

PI 7.0 SOAP message reply HTTP 500 and after the fault message

Hello Everybody,
I have the scenario RFC -> XI -> SOAP in synchronous mode.
I use for the mapping XSLT because I have to put some dynamic data comming from the RFC in the header of envelope.
At level of adapter receiver SOAP , I flag the "do not use envelop"
In normal, that works .
When the is an fonctionnal error in SOAP service, it sends me back an error HTTP 500 and afterwards the fault message in a soap envelop format. In that case, how can I pass over this error to treat the envelop because in adapter, it is stopped and it returns a short dump to the RFC.
Is there somebody who can help me with this problem ?
Thanks in adavance for your answers .
Regards.
Eric.

Hi,
In case of a SOAP error while processing the request, the SOAP HTTP server MUST issue an HTTP 500 "Internal Server Error" response and include a SOAP message in the response containing a SOAP Fault element
Thanks,
RamuV

HTTP Adapter outbound (SSL) processing

I am trying to send a XML message (an Invoice) from XI to an external Customer via HTTP Adapter.
The site I am posting the message to is SSL.
I have installed the Customer's Certificate via STRUST under SSL Client (Standard) and can see it in the
certificate list.
Within the Communication Channel for HTTP Adapter I have tried Addressing Type of URL
and also with a HTTP (SM59) destination. Both do not work.
The setting used for both are
host : workflw.externalcustomer.xxx.com Service: 443
Path : /SubmitInvoiceUAT/SubmitInvoice.asmx/SubmitCXML
HTTP Proxy : internetproxy.mycompany.com
Proxy Servuce : 80
SSL Active : SSL Client Certificate ANONYM SSL Client(Anonymous). As no client cert is used for logon
I have attempted a connection test within SM59 for the HTTP Destination and I receive the error
ICM_HTTP_SSL_ERROR.
1) If the SSL Client Certificate ONLY for logon then how does XI know what cert to encyrption with?.
2) Should Verisign/Thawte etc CA certs be also installed in STRUST ?
Does that "public" key for encryption need to be placed anywhere (eg STRUST) or will XI just do
3) this when it does the handshake with the external HTTPS site it is posting to ?
4) Also the transaction STRUST may (or may not depending on how the documentation is interpreted) need the installation of some certs into its PSE (Personal Security Environment). But exactly what they mean is a mystery. I have created what I thought was the servers cert but cannot see to create a dev.connector.boc.com named certificate. Perhaps that is not needed.
Here is the help <a href="http://help.sap.com/saphelp_nw70/helpdata/en/e8/1f1041a0f6f16fe10000000a1550b0/frameset.htm">SAPHelp on PI HTTPS Config</a>
5) Also OSS note 510007 it advises to check a number of settings. I have had a look at what I can ..namely via transaction RZ10 and I can see one parameter and should that be changed to include a HTTPS ? .i,e currently it is set to     <i>icm/server_port_0 PROT=HTTP,PORT=80$$,PROCTIMEOUT=3600</i>

Hello
As a process you have done well. I suspect the problem could be with " SSL Client Certificate ". Check weather the SSL Client Certificate is Valid version.
Best practice.
   Alway when we are communicating with HTTP outbound. It is better to have a STANDALONE ftp location for both SENDER and RECEIVE xml DATA transfter files.
         I hope I answered your question. It was nice answering your question. Feel free to reach SDN if you have any questions.
Regards

EJB/8i deployment and SSL

Hello JDev Team,
I want to use SSL encryption and authentication in my InfoSwing BC4J Oracle8i application.
For Local Deployment it's quite transparent you just define appropriate LocalConnection class and SSL works fine.
But for EJB/8i Deployment it's not that clear. As I understand EjbConnection class can accept user/password authentication only.
Do I have to extend oracle.dacf.dataset.connections.Connection class and create my own SSL-oriented Connection with my own setConnectionSpecificEnvs method? Is that a possibility?
Could you please give me some directions on this case?
Thanks,
Victor
null

Please check the "How to's" in the JDeveloper section of OTN (http://otn.oracle.com). That should shed some light.
Happy researching,
Rajesh

How to make an HTTP request via SSL

Hi,
I´m using an instance of the class CL_HTTP_CLIENT to make an HTTP request to a https server. as long as it requires an SSL authentication, it returns an ICM_HTTP_SSL_ERROR error message.
How do I tell my program to ask for user´s certificate, and use it in the http request?
I´m supossed to have hundreds of users online running this application (it´s over SRM 5.0). How can I reach this?
Thanks you very much.
Federico.

Hello Frederico,
>1. By creating a new client, you mean go to "Environment->SSL Client Identitites" in STRUST, right? >Can I use a previously existing one?
I meant to create a new client SSL PSE. By default in a new Netweaver abap system, you have 3 of them : ANONYM, DFAULT and WSSE.
If you need more of them, you can create them with the menu "Go to-->Environment->SSL Client Identitites".
>2. I need this PSE client to have several 'identitites', I mean, to include several certificates from all my >users. Is it possible? If it´s not; how should I do so?
It seems that you want a different certificate per user. These client certificates in STRUST are designes to identify a SAP abap system, not human users. If you have 1000 users, you will not create 1000 certificates in STRUST !
Usually, you use only 2 entries here, one for anonymous HTTPS access and one authenticated HTTPS access. It is unusual to have several different identities for the same abap server. But it might be possible : for exemple, one identity on the intranet and an other one on the Internet.
>3. When I had my new PSE client, and my HTTP RFC destination of type 'G' configured to use that >PSE client, and when in abap I instantiate my http client (using CREATE_BY_DESTINATION method, >from CL_HTTP_CLIENT class): How does SAP knows which certificate to use? Because there will be >several users (hundreds) running this code to retrieve their specific data from a third party server.
>How does SAP knows whom certificate must use?
The certificate used will be the one defined in the HTTP destination.
You still seem to make the confusion between server client certificates and users client certificates.
a users client certificate is stored in the user's PC (or smartcard) and is used for HTTPS connections from the user's browser to the SSL server, not for an HTTPS connection from the ABAP server to another server.
Regards,
Olivier

Certificate Based Authentication and SSL

To whom it may concern,
I have installed SJES on Solaris 9 x386 (intel version). Everything is running fine, the mails are also coming and going.
Now, I need Certificate based authentication and SSL. I have downloaded versign.com trial certificate and have install it succesfully in the Messaging Server Console -- > Manage Certificates. The certificate is also visible in its tab.
Next, I followed the documentation and enable ssl by using ./configutil utility. And also restarted the server.
I am running my Messenger express (http) like this :
http://testing.xyz.com:8100
(I am using port 8100 for http access to mails). After restarting the mail server, I tried :
https://testing.xyz.com:8100 also,
http://testing.xyz.com:443 also,
https://testing.xyz.com:443 also,
but I cannot see the login page of the mail server. All the above mention url i tried and just given error "the connection was refused when attempting to contact testing.xyz.com. I CAN ONLY SEE THE LOGIN PAGE WHEN I WRITE THE OLD HTTP ADDRESS: i.e. http://testing.xyz.com:8100
And I also checked the logs and the server is having no problem in starting and there is not a single word regarding SSL enabling in the logs.
Please help me out, it's really a strange behaviour. I am using SunONE Messaging Server 6.0.
Thanking you,
Farhan Ahmed,
System Engineer
Dubai, UAE.

Dear jay,
I am pasting a line from imap and http logs ... i don't know what this error means and how to resolve it.
[29/Dec/2004:14:42:45 +0100] testing imapd[888]: General Error: SSL initialization error: ASockSSL_Init: couldn't find cert Server-Cert (-8183)
strange thing is that my certificate name is lowercase server-cert and also i can see in the GUI console the certificate name as lowercase and I have also set this parameter encryption.rsa.nssslpersonalityssl = server-cert (all lowercase), but the error in the log tells it as "Server-Cert" !!!! though it is "server-cert"
i got this line from the http log:
[29/Dec/2004:14:42:47 +0100] testing httpd[894]: General Error: SSL initialization error: ASockSSL_Init: couldn't find cert Server-Cert (-8183)
I haven't missed the sslpassword.conf file step. I have placed the same password which i provided while generating the certificate request in the GUI.
Help me out what this errors means and how to resolve them. I have also copied the cert7.db and key3.db to /opt/SUNWms*/config directory from the /var/opt/mps/serverroot/alias
Thanking you,
Farhan Ahmed,
System Engineer,
Dubai Internet City, Dubai, UAE.

SSL encryption for Apex 4.1

Hi Guys,
I am trying to set up SSL encryption for my local install.
I am running APEX 4.1 in Windows 7 (32 bit) , Oracle XE 11G with embedded plsql gateway setup.
The APEX documentation I looked at that deals with SSL:
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21678/adm_mg_service_set.htm#AEADM297
instructs to turn HTTPS on in APEX_ADMIN (Internal schema) under security.
It didn't work as APEX was visible still under http://localhost:8080/apex and using HTTPS gave page not found error. On top of that It locked out my Admin account for INTERNAL workspace. So I had to switch it back via SQL query in SQL plus.
From limited experience in doing something similar in Tomcat, I believe one needs certificates etc before proceeding with this.
Anyone who has done this before, can you please point to a any documenation/blog post, tutorial etc that shows how its done? Many thanks.

Hi,
http://docs.oracle.com/cd/E17781_01/install.112/e18802/toc.htm#BABGCDJJ
>
HTTPS is not supported natively with the HTTP listener built into Oracle Database XE. If you want HTTPS support, use an alternative Web listener, such as Apache, that does provide HTTPS support, and provide proxies for the URLs provided by Oracle Database XE.
>
Regards,
Jari
http://dbswh.webhop.net/dbswh/f?p=BLOG:HOME:0
Edited by: jarola on Jan 25, 2012 9:42 AM
That APEX instance admin parameter you have change do not enable HTTPS. It require that you use HTTPS on your web listener.
Here is how reverse HTTPS Requirement for APEX instance admin
http://docs.oracle.com/cd/E23903_01/doc/doc.41/e21678/adm_mg_service_set.htm#autoId17

Using RFC or HTTP adapter

Hi All,
I want to configure a receiver adator as the receiver adaptor in the sap xi system which will receive data from a 3rd party.
In this case among the adaptors RFC, SOAP, & HTTP which one will be the best to use and why ?
Also please let me how to use the RFC adapter as a trfc call.
Regards...

Hi Santosh,
You can receive your data from the 3rd party either with soap or http adapter. You can use rfc adapter for sending data to sap.
RFCs are of 5 types. Please check this thread for detailed information:
standard RFC Vs tRFC
From SAP help:
The RFC adapter maps the following RFC calls to XML messages and the other way around:
● Synchronous RFC calls (sRFCs) in messages with Structure linkquality of service Best Effort (BE)
● Transactional RFC calls (tRFCs) in messages with quality of service Exactly Once (EO)
● The receiver RFC adapter can also process messages with quality of service Exactly Once In Order (EOIO). They are mapped to transactional RFC calls (tRFC).
You have tRFC and qRFC queues. Take a look at this blogs:
/people/sap.india5/blog/2006/01/03/xi-asynchronous-message-processing-understanding-xi-queues-part-i
Regards,
---Satish

System -- XI -- HTTP Synchronous Scenario. Pls advice

Hi All,
I have 2 scenarios:
1. HTTP -- XI --- System A Synchronous Scenario
2. System B -- XI -- HTTP Synchronous Scenario
Can HTTP Receiver Adapter be used for both the above synchronous scenarios?
a. In HTTP Receiver Adapter is RFC Destination is of Type G?
b. What is Target Host
    In Scenario 1 is it System A host name?
    In Scenario 2 is it System B host name?
c. What is Path Prefix?
d. What is Service Number?
e. Does WebServer needs to run on System A and System B for HTTP connection?
f. Is there any property in HTTP Receiver Aadapter to make it
   Qos as BE or it is by default?
Regards

Did you look at the SAp documentation?
http://help.sap.com/saphelp_nw04/helpdata/en/0d/5ab43b274a960de10000000a114084/frameset.htm
VJ

What is a gateway proxy?? what are synchronous and asynchronous calls?

bapis are rfc enabled. but are there any other rfc's available in sap? what is a gateway proxy?? what are synchronous and asynchronous calls?

Hello:
Lets st art at the beginning.
There are NO documented viruses that affect a Mac running OS X - none (there are instances of Malware).
Gateway GEO-IP/BOTNET Alert
This is a Youtube video that explains what you have (I assume you installed it somehow) on your computer:
http://www.youtube.com/watch?v=JwRi2me2hSk
For openers, I would uninstall any A/V software you have put on your system. It is certainly possible that that junk has put some other stuff on your computer.
I'm also afraid my computer might have been hacked?
Highly unlikely.
Barry

SSL encrypted webmail won't run

I am having a problem getting a SSL encrypted GroupWise WebAccess to load the Login page in Safari on Vista (it works in Safari on XP). GW WebAccess works just fine in Firefox if I turn off TLS, and works in IE 7 if I turn ON SSL 2.0. In Safari there is no granular control over Web encryption. Does anyone have any idea how to get it to work? I really am trying to make Safari my primary browser, but GW WebAccess is very important for me to use it... It times out and I get, "Safari could not open the page “https://groupwise.bronsonhg.org/gw/webacc” because the server is not responding." What's interesting, is that I actually use http://groupwise.bronsonhg.org but it does resolve to the above SSL address - its then that it sits there and times out. Also, I tried it on Safari on a MacBook, and it works fine. Vista is the only OS this website doesn't work on Safari. Any idea's?

Sounds like Safari is an unsupported browser for this web application.
Try this: click Develop -> User Agent -> Internet Explorer 7.0

Authorware IE7 and SSL processing problem

I have been using AW for about 14 years. Over the
last couple years, I have integrated my programs into a Learning
Management System. I noticed immediately that IE 7 caused my
Authorware courses to choke at the point I did an LMS Initialize
routine. Our LMS has SSL encryption. Some of the posts I've read on
the internet link the IE 7 problems to SSL processing. If I were to
have SSL processing removed from our LMS, would I still run into
errors with AW and IE 7? Any thoughts or comments are appreciated!
For any Adobe folks reading this - I have developed hundreds
of projects using AW - it is by far THE best tool for e-Learning,
application simulation, and assessments! It is in the best interest
of thousands of folks to upgrade it and keep it around!

More likely, or at least the first thing to check, is the
'iFrame'
workaround. Something in IE7 prevents the
ReadURL("javascript...")
function from working correctly. The workaround is to embed
the A'ware
file's HTML file into an iFrame in another HTML file that the
LMS calls.
Search the forum for quite a few posts detailing this.
If that doesn't work, then it could be an https issue; I've
had variable
luck with such URLs....but they do seem to work overall.
If https worked in previous versions of IE and your courses,
that's
likely not the issue with IE7 (but who knows for sure!).
Erik
cjgrange wrote:
>
I have been using AW for about 14 years. Over the
last couple
> years, I have integrated my programs into a Learning
Management System. I
> noticed immediately that IE 7 caused my Authorware
courses to choke at the
> point I did an LMS Initialize routine. Our LMS has SSL
encryption. Some of the
> posts I've read on the internet link the IE 7 problems
to SSL processing. If I
> were to have SSL processing removed from our LMS, would
I still run into errors
> with AW and IE 7? Any thoughts or comments are
appreciated!
>
> For any Adobe folks reading this - I have developed
hundreds of projects using
> AW - it is by far THE best tool for e-Learning,
application simulation, and
> assessments! It is in the best interest of thousands of
folks to upgrade it and
> keep it around!
>
Erik Lord
http://www.capemedia.net
Adobe Community Expert - Authorware
http://www.adobe.com/communities/experts/
http://www.awaretips.net -
samples, tips, products, faqs, and links!
*Search the A'ware newsgroup archives*
http://groups.google.com/group/macromedia.authorware

RFC to HTTP Synchronous and SSL encryption

Similar Messages

Maybe you are looking for