Seeburger AS2 connectivity issues.

Hello,
is it possible to have one single certificate for both AS2 and SSL, using HTTPS protocol.
if yes should we upload the certificates twice (AS2 & SSL)?
Also when we sent some messages via AS2, the seeburger AS2 server seems to be closing the connection abruptly. are there any logs generated on the seeburger side in order to check what actually happened?

Hi
AS2 and SSL follows two different protocols. So It's not possible to use same certificate for both of them.
for AS2 connectivity you can ask your network team to open the network port only for AS2 authentication.
regards
chandra

Similar Messages

  • Seeburger AS2 - connectivity

    Hello,
    is it possible to have one single certificate for both AS2 and SSL, using HTTPS protocol.
    if yes should we upload the certificates twice (AS2 & SSL)?
    Also when we sent some messages via AS2, the seeburger AS2 server seems to be closing the connection abruptly. are there any logs generated on the seeburger side in order to check what actually happened?

    Hi,
    AS/2 details:
    http://www.seeburger.com
    http://www.seeburger.com/fileadmin/com/pdf/AS2_General_Overview.pdf
    http://www.seeburger.com
    http://www.seeburger.com/fileadmin/com/pdf/AS2_General_Overview.pdf
    http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
    http://www.seeburger.com/fileadmin/com/pdf/SEEBURGER_SAP_Adapter_engl.pdf
    http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
    http://www.sap.com/france/company/events/2006/02-01-Automotive-Seeburger.pdf
    http://h41123.www4.hp.com/presentations/ISUG/XISeeBurger.ppt
    http://www.sap.com/asia/company/events/nwtechdays/presentation/australia-slides/Pre-Built_Integration.pdf
    Seeburger thread:
    Refer this forum which talk about the configuration which need to be done for AS2 adapter. This is very helpful:
    Re: Pls.. Help Needed.. Seeburger Mapping Names..!!
    Re: Seeburger AS2 adapter...
    Re: AS2 Module tab.. Mapping Names for modified Standard Msg types ? ? BIC ??
    AS2 adpater-- Configuration details for both SND and RCV.
    AS2 Sender Adapter -- Need few details.
    Flow of data:
    EDI-SEEberger-XI-IDOc-R/3
    Seeburger info:
    Re: seeburger adapter
    Re: SEEBURGER's VAN Adapter
    AS2 info:
    Re: Regarding Seeburger AS2 Adapter
    SEEBURGER EDI adapter
    Wanna Party ?
    Wanna Party ?
    How to Set up an SAP XI Integration Directory Scenario with Party to Support EDI Partner Processing
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b0b355ae-0501-0010-3b83-8f2bb566fa47
    Here is the link for your reference:
    EDIFACT to XML - Stylus Studio Solution
    The steps to convert EDI to XML / XSD can be found at the following link:
    http://www.stylusstudio.com/edifact_to_xml.html
    Stylus studio download link: http://www.stylusstudio.com/xml_download.html
    Or
    Using the Conversion agent
    How to get started using Conversion Agent from Itemfield
    Conversion Agent a Free Lunch?
    Integrate SAP Conversion Agent by Itemfield with SAP XI
    More on the SAP Conversion Agent by Itemfield
    SAP XI supports EDIFACT
    How to get started using Conversion Agent from Itemfield
    More on the SAP Conversion Agent by Itemfield
    http://www.stylusstudio.com/edi/XML_to_X12.html
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/b0b355ae-0501-0010-3b83-8f2bb566fa47
    Details on XI EDI adapter from seeburger
    SAP XI supports EDIFACT
    http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
    http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
    http://www.seeburger.com/fileadmin/com/pdf/AS2_General_Overview.pdf
    SAP Adapters
    EDI with XI
    http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
    http://www.seeburger.com/fileadmin/com/pdf/SEEBURGER_SAP_Adapter_engl.pdf
    http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
    http://www.sap.com/france/company/events/2006/02-01-Automotive-Seeburger.pdf
    http://h41123.www4.hp.com/presentations/ISUG/XISeeBurger.ppt
    http://www.sap.com/asia/company/events/nwtechdays/presentation/australia-slides/Pre-Built_Integration.pdf
    http://www.seeburger.com
    http://www.seeburger.it/fileadmin/it/pdf/2005_04_sapphire_Ferrero_transcript.pdf
    http://www.seeburger.com/fileadmin/com/pdf/Butler_Group_SEEBURGER_Technology_Audit.pdf
    http://www.sap.com/france/company/events/2006/02-01-Automotive-Seeburger.pdf
    http://h41123.www4.hp.com/presentations/ISUG/XISeeBurger.ppt
    Regards,
    Nithiyanandam

  • AS2 connectivity issue

    Hi,
    I am facing an issue with connecting through AS2 server to PI server. Below is the scenario:
    We receive different types of files from customer (EDI and Non EDI). We have maintained one configuration scenario (CS) for EDI and another one for non EDI. But there is only one Party. Two communication channels, one for EDI transactions and one for non EDI transactions.
    I have configured the AS2 setup for EDI transaction and tested. It worked fine. Then I set up the AS2 configuration for Non EDI transaction. (basically two communication channels polling the same AS2 server). When I tested the setup using the stand alone tool i am getting the error as HTTP protocol error. 403 Forbidden.
    It works fine if I set up the configuration for only one communication channel. Not working with both the configuration at the same time.
    Is it because of two different configuration scenarios (two communincation channels) and same Party? Is there any configuration I need to set up for this scenario?
    Please help.
    Regards,
    Vas

    The only option seems to be saving the file at some location and then pick them from there for differnt scenarios. If you go with this approach, you can use single communication channel towards AS2 sender partner. You may agree upon a message subject or AS2 Filename with your EDI partner and then based on Subject or Filename value, place the file in different directories or with different names. For this you may use Dynamic Configuration as I have explained here:
    http://wiki.sdn.sap.com/wiki/display/XI/AttribMapper-AssignAS2Filename+Dynamically
    Regards,
    Prateek Raj Srivastava

  • Seeburger AS2 adapter issue

    Hi experts
    We have migrated from XI 3.0 to PI 7.1.
    The corresponding AS2 seeburger is also upgraded to a compatible version.
    But after that it seems the mapping is not working. I am getting the foollowing error while using AS2 adapter at receiver side.
    Runtime exception during processing target field mapping /LIST/S_ISA/D_I05_2. The message is: Exception:[java.lang.NoClassDefFoundError: com/seeburger/functions/permstore/VariableFactory] in class
    A function in map uses seeburger classes(VariableFactory)
    Thanks and Regards
    Dhanish Joseph

    As Anoop said  check for property store values.
    http://seeburger.com/xi/SeeFunctions  provider.servlet.server ; http://localhost/50100 . check for this entry from property store from see front end.
    make sure all other mapping variables and addressbook values imported properly.
    Regards,

  • Seeburger AS2 Certificate Issue

    Hey,
         We are facing an Issue while posting an EDI order to XI.
    The sender system receives an error https 403 forbidden.
    I assume this is an authorization error.
    We had a certificate say XYZ.cert taht expired and hence we uploaded a new certificate say XYZ_1.cert
    Now when the sender sends the data, the AS2ID is XYZ and the private key is XYZ.
    i would like to know if any of these two values determine the certificate. because if that is the case then the sender data will refer to the old certificate which has expired.
    Also if anyone has a different explanation for the error, please mention.
    regards,
           Milan Thaker

    Hi Milan,
    If you receiving EDI documents from your partner then in the sender agreement you will specify following certificates
    1. Authenticate Certificate - Partner Public Key used to validate the signature of the partner
    2.Decryption Key- Your Private Key (your certificate) to decrypt the message
    So if you changed your certificate then you need to give your new certificate (public key) to your partner for encrypting.
    Regards,
    Prakash

  • Seeburger AS2 Certificates updates

    Dear Experts,
    We're having a problem to add in new certificates from our partner. For your info we're using Seeburger AS2 connect and no one knows how to update the certificates including our vendors. Please let me know how to update the certificates. Thank you

    Hi,
    if you are on PI 7.1x go to Netweaver Administrator (http://server:port/nwa)
    Then go to Configuration Management -->  Security --> Certificates and Keys
    There you shold find several Key Stores ("Key Storage Views")
    Select the Keystore which holds the AS2 certificates.
    If you are not sure which one is the correct one, check your Sender/Receiver Agreements in the Integration Directory.
    The certificates that you specified as TRUSTED\<keystore>\certificate-name in your AS2 configuration are the ones you have to change.
    In the "Key Storage View Details" you can add, modify, delete,... the certificates.
    regards,
    Daniel

  • IDoc to AS2 scenario connection issue

    Hi Experts,
    IDoc to AS2 scenario.
    i am geeting below connection  error  while sending data from PI to Third Party Partner.Please help me on this issue i will appriciate you .
    MP: exception caught with cause javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: java.net.SocketException: Connection reset # , SEEBURGER AS2: java.net.SocketException: Connection reset #
    Thanks,
    Aadi

    Hi Srini,
    Thanks for your reply.
    after changing the timeout also i am getting same error
    Delivering the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: java.net.SocketException: Connection reset # , SEEBURGER AS2: java.net.SocketException: Connection reset # .
    Please help me on this issue.

  • Issues with Seeburger AS2 alerts

    Hello All,
    I am trying to setup an alert rule for any failures in the AS2 adapters.
    I have created an alert rule in the RWB, with the adapter type as AS2.I have created the alert category as well.
    When the AS2 message is unable to reach the destination system, the communication channel errors out with the description about the connection issue. But for some reasons, the alert rule is not called. I could see in the "SXMSALERT_LOGREADER" report that No active rule for this Adapter Framework exception. I have selected a * for all the filter criteria in the alert rule except for the adapter type (which is filtered as AS2).
    Are my basis guys missing any alert enablement functionality while deploying the AS2?
    Pls note that I am able to receive email alerts if the adapter type is selected as File or JMS instead of AS2.
    Pls help me.
    Edited by: Senthilnathan Natarajan on Oct 4, 2011 5:53 PM

    I'm resending this since I did not have any luck with it the first time.
    We also have an oss note waiting to be responded on this subject.
    When I send messages using Seebuger FTP adapter, I see the following information in the SAP message monitor -
    "Message entered module processor exit bean and will be transferred to JCA adapter".
    But does not get to IBM VAN mailbox. How do I trace from this point onwards.
    Should I use Seeburger monitoring tool for this? If so, I don't see anything in Seeburger monitoring (used all criteria).
    Please let me know if you have any information on this subject.
    Thanks,
    Parimala

  • Seeburger AS2/SSL Connectivity Error

    Dear SAP experts,
    I would need your guidance on this one regarding the error that I am getting in our AS2 connectivity with Trading Partner.
    The scenario is from SAP XI to Trading Partner.
    We are using HTTPS connection. I've already uploaded the SSL certificate of the Trading Partner in the SAP XI Keystore and i've tried to trigger IDocs from XI to TP.
    However, i am getting this specific error,
    Delivery of the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: 500 Internal Server Error # , SEEBURGER AS2: 500 Internal Server Error # : javax.resource.ResourceException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: 500 Internal Server Error # , SEEBURGER AS2: 500 Internal Server Error #.
    Can somebody advise what causing the error?
    Kindly advise!
    Thanks!
    Godo

    Http Error 500 are the most difficult to decipher
    You will need to get you Basis to turn on AS2 logs and then check the trace the in the j2ee engine to understand what the error is. Most of the times; the error you see in these logs hits the nail on the head.
    Regards
    Bhavesh

  • Seeburger AS2 Reciever error: 404

    Hi
    Configuring and activating the interface for AS2 receiver channel is loggin error in RWB:
    Unable to forward message to JCA adapter. Reason: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: 404 %2Fhttp%3A%2F%2FBlueberry%2ECommu%2Ecom%3A4080%2Fas2NotFound
    Pls can any help be offered to fix this issue?
    Regards
    Prabhu

    Hi Prabhu,
    Check the belowlinks
    403 Forbidden error in a Secured B2B (EDI XI) connection
    Http* Errors in XI
    Make sure that SAP/XI/Engine is active in SICF transaction.
    Regards,
    Venkata Ramesh

  • Client Auth  and SSL with Seeburger AS2 adapter

    Hello All,
    We are using the Seeburger AS2 adapter in our landscape and I am in the process of setting the same up and have made quite some progress in all my issues.
    and I  hope that you will be able to help me out.
    1. Server SSL on Receiver AS2 adapter
    I am sending a message from XI using the Receiver AS2 adapter to my AS2 test tool using Server SSL.
    This is working perfectly fine. In my AS2 adapter I have selected HTTPS as the protocol and the message goes via SSL to the target test tool, is processed and the MDN comes back to XI perfectly.
    The issue here is :
    Irrespective of what is provided in the Server Certificate ( Keystore) , the message goes to my target test tool. I even left this field blank with no certificate entry and still the SSL connection was established and the message went to the target system.
    Is there no validation that XI does here? I am lost what is the use of this entry Server Certificate if XI blindly accepts all SSL connections.
    I am using a Decentral Adapter Engine with LoadBalancer.
    2. Client Auth on Receiver AS2 Adapter
    I tried to perform Client Authentication by proving my Server's private key in the AS2 adapter. The corresponding public key is loaded in my partner's Keystore.
    XI error's with the error "SSL handshake failed - Bad Certificate" .
    I am not sure why XI is erroring out here and I have a feeling that I have misunderstood the use of the fields in the AS2 adapter,
    Server Certificate ( Keystore) and Private Key for Client Authentication.
    Has anyone tried this? If further details are needed, I will be able to furnish the same.
    Regards,
    Bhavesh

    Hello Jens,
    Thanks for your reply.
    1. The Encryption and Signature part of the Interface is working absolutely fine and I use the same concept highlighted by you - The Sender always signs the message with his private key and encrypts with message with the partner's public key in the corresponding agreement.
    2. Server SSL is also working perfectly fine, i.e, when XI initiates the connection the SSL connection is established to the partner.
    3. Mutual Auth was the issue where I was getting the bad certificate issue.
    To investigate further I moved the same setup to my Central Adapter Engine and all the issues I had described above seem to have vanished and things work exactly as I was expecting, ie.
    The field : Server Certificate (Keystore) is used to provide the Target System's Server SSL's public Certificate.
    The field : Private Key for Client Authentication is used where XI provides its own Server SSL's private key for Mutual / Client Authentication.
    The problem seems to be with my Decentral Adapter engine and not my central adapter engine and so I guess,
    1. I either have the incorrect certificates on my Decentral Adapter Engine.
    2. I also have 2 instances of a Decentral Adapter Engine with a Webdispatcher and so maybe the 2 Visual Admin's of the 2 Decentral AE are inconsistent.
    3. Maybe it was just a long day and I did something wrong
    Will investigate further for the root cause but I am glad that my concepts remain intact and things do work as I expected them to work.
    A blog on all this is on the cards sometime soon.
    Cheers,
    Bhavesh

  • AS2 Connection error in PI

    Hi PI Experts,
    IDoc to AS2 (HTTPS) scenario.
    I am using AS2 Rece Channel  with HTTPS  Transport Protocol.
    PI Receiving the data from ECC and while sending the data from PI to Third Party Partner getting below error .Please help me on this issue.I will appriciate you .
    Error:
    Message could not be forwarded to the JCA adapter. Reason: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: java.io.IOException: key inappropriate for algorithm., SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: java.io.IOException: key inappropriate for algorithm.
    Thanks,
    Aadi

    Hi Harikumar,
    Thanks for your reply, now i am getting different error,
    Could not deliver as2 message to partner: java.net.SocketException:
    Connection reset # null
    Please can you help me on this issue.
    Thanks,
    Aadi

  • Seeburger AS2 Adapter failure

    Hi ,
    Iam trying to test the Outbound AS2 connection though the receiver is not yet ready with the setup but i want to make sure at my side . While testing i got this error message ..
    "Unable to forward message to JCA adapter. Reason: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: There is no certificate with such alias, SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Th"
    and Delivery of the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: There is no certificate with such alias, SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: java.security.PrivilegedActionException: com.seeburger.
    Can anyone help me to identify the issue here ?

    The certificate of your client must be maintained in AS2 keystore. Make sure that in the receiver agreement, you have given the same name. If certificate name is test.crt, then receiver agreement should have entry AS2keystore\test.
    Regards,
    Prateek

  • Seeburger AS2 Adapter: "MDN not signed"

    Dear all,
    we just updated our test system from XI 3.0 to PI 7.1. Now we are facing a problem with our Seeburger AS2 Adapter.
    I sent out a message via AS2 and get the follwing error message in Seeburger AS2 Monitor:
    "MDN not signed"
    In the Receiver Communication Channel I checked the Option "Sign MDN". In XI 3.0 this Scenario was working perfectly. So I contacted our communication partner and asked them if our AS2 message really contained a request for a signed MDN. Our commnucation partner confirmed and sent the MDN as text file to me. This text file shows that the MDN is signed. So it seems that the Seeburger AS2 adapter does not notice that the received MDN is a signed one. But why? Do you have an idea?
    Just for testing purposes I unchecked the "Signe MDN" option. In this case the transmission finished successfully.
    Who can help?
    Thanks
    Michael

    Dear Vikrant,
    many thanks for your reply. But I am not sure if we are really facing the same issue as you described it in your article.
    Currently we have this situation:
    When I send out a message the Seeburge Workbench provides only the following error message:
    "MDN not signed"
    Via the Recovery Monitor I can check the received MDN. Here I can see that the MDN is signed and positive.
    In the Runtime Workbench I checked the following:
    1. In the Message Monitor (Adapter engine) the message is in status "System Error". Here are the details:
    Message could not be forwarded to the JCA adapter. Reason: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: Negative synchron MDN received., SEEBURGER AS2: Negative synchron MDN received.
    Adapter Framework caught exception: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: Negative synchron MDN received., SEEBURGER AS2: Negative synchron MDN received.
    Delivering the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: Negative synchron MDN received., SEEBURGER AS2: Negative synchron MDN received..
    2. The Communication Channel Monitor shows the following error messages:
    Error type: REPORT_ERROR >> Error date: 12/14/10 12:02 PM >> Description: MDN not signed [12/14/10 12:02 PM]
    Message processing failed. Cause: javax.resource.ResourceException: Fatal exception: javax.resource.ResourceException: SEEBURGER AS2: Negative synchron MDN received., SEEBURGER AS2: Negative synchron MDN received.
    I do not understand why the MDN is recognized as negative and unsigned even if the plain text version of the MDN shows that it is signed and positive.
    In your article you recommend to create a sender communication channel for MDN and a corresponding sender agreement. We already did that in XI 3.0 to forward the MDN as STATUS IDOC to SAP ECC.
    Maybe you have an additional idea?
    Thanks
    Michaek

  • Seeburger AS2 error: No Trusted Certificate found

    Dear SAP experts,
    Good day!
    Need your expert advice regarding the error that I am getting in Seeburger AS2.
    Here's the scenario:
    SAP XI is sending messages to Trading Partner via AS2 adapter which resides in Seeburger.
    I've trigerred already messages but they are getting this kind of error:
    Delivery of the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # , SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # : javax.resource.ResourceException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found # , SEEBURGER.
    Kindly advice if there are missing or invalid certificates on both sides?
    What would be the cause of the issue?
    Many Thanks!
    Godo

    Godo,
    I think you are using secure communication for your seeburger CC. Can you pls. check if you have installed(keystore) certifcate on J2EE engine and configured certificate provided by ftp client in your CC.
    Also one more important thing,
    Make sure that you have entry with ftp server name and correspoding ip address in hosts.inc on a system where your adapter engine resides.
    Check detail error messsage at:
    http://XI server : port / nwa --> Message Monitoring --> Logs and Trances and select DefaultTrace in second drop down list. You will find all events details with description. ( If you run your interface and check you will find recent activities on XI server. Hope this will give you much better picture)
    Hope this will help.
    Nilesh

Maybe you are looking for