SSL Configuration between Web Dispatcher and Portal

Here is the scenario:
INTERNET -
https--> WEB DISPATCHER (decryipts)-https> PORTAL
When a request for portal page is sent to WEB DISPATCHER, it gives the following error in dev_webdisp:
[Thr 1087416640] ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed
ERROR in af_verify_Certificates: (12851/0x3233) Verification of one certificate of path failed because the CA flag of its basic constraints is set to FALSE
ERROR in check_basicConstraints: (12851/0x3233) Verification of one certificate of path failed because the CA flag of its basic constraints is set to FALSE
I am using SAP's test certificates and there is no documentation for the error as far as I know.
Any ideas ?

Hi Cristiano,
I solved the problem.
This error message is being caused by the mismatch between the issuer (SAP Test) and server pse generation strings (for example O and OU values ).
As the documentation suggests:
"For example, if you use the SAP CA, the naming convention is CN=<host_name>, OU=I<installation_number>-<company_name>, OU=SAP Web AS, O=SAP Trust Community, C=DE."
Thanks for the reply,
Best Wishes
Edited by: Yuksel Guney Hanedan on Aug 6, 2010 4:35 PM

Similar Messages

Diff. between Web Dispatcher and ICM

hi gurus,
Please help to understand the Difference between Web Dispatcher and ICM in whereas ways like
When do we use which tool?
The architec differences between them?
Anything more that would help me to understand better!
Thanks a lot in advance
Regards
Sekhar

Hi
At top level, Web dispatcher is like simple dispatcher which handles all the internet related requests like Http, Https, Smtp.
ICM is Internet connection Manager which is used to administer the flow between SAP and outside world using HTTP, HTTPs, SMTP
Please read these
Web Dispatcher
http://help.sap.com/saphelp_47x200/helpdata/en/42/5cfd3b0e59774ee10000000a114084/content.htm
ICM
http://help.sap.com/saphelp_nw04/helpdata/en/0a/a7903febb15a7be10000000a11405a/content.htm

Web Dispatcher and SSL on ABAP+Java

Hello,
Have installed SAP web dispatcher on WAS 6.40 ABAP+Java system. Communicating with Portal SP16 system.
The HTTP works fine. Have not been able to get SSL working with web dispatcher.
For troubleshooting activated ITS on this system and HTTPS works fine with ITS webgui.
Have followed the "how to" SSL for web dispatcher guide.
Also should mention that we have generated certificate requests and PSE's but our organization has not yet chosen a certificate authority to sign the cerficates. For other scenarios (log onto Portal, XI, etc) the only difference is the certifcate warning dialog, otherwise works fine. Would this cause a problem for Web Dispatcher?
Trying the SSL end to end scenario receive
WARNING: Could not start service 0 for protocol HTTPS on host "max-sap" on all adapters
Is there anything
unique for the ABAP+Java configuration?
Thanks,
Alan

I solved this problem by setting the following profile parameter on my webdispatcher profile.
wdisp/ssl_ignore_host_mismatch = true
Doesn't fix the underlying problem but got me going until I can figure it out.

SAP Web Dispatcher for Portal reverse proxy

Hi Experts,
I am on EP6.0 SP20 and trying to use SAP web dispatcher as reverse proxy.
I followed the below web log to configure the web dispatcher.
[How to...Configure SAP Webdispatcher as a reverse proxy|How to...Configure SAP Webdispatcher as a reverse proxy]
I still have some problems logging into the Portal through the web dispatcher.
Web Dispatcher is in the DMZ not behind the firewall. We opened the port 80 only for Web dispatcher server.
We are getting an error in the browser,
http://<host of portal>.<domain name>:50000/irj/portal can not be recognized.
I have no clue to how to get rid of this error. any help will be greatly appreciated.
Regards,

Hi,
I do not know the exact ESS WebDynpro you are using but it may be possible that these WebDynpros use absolute URLs which of course do not point to the hostname and port of the Web Dispatcher.
There are several ways to circumvent this:
Please check http://help.sap.com/saphelp_nw04s/helpdata/en/62/5f374ff72c40478fcba2bb4fa79ddf/frameset.htm and add the parameters wdisp/add_client_protocol_header and (more important for you: wdisp/handle_webdisp_ap_header) to the WebDynpro configuration.
(A nice explenation why we have to use this can be found here: https://www.sdn.sap.com/irj/sdn/wiki?path=/display/bsp/using+proxies&)
another way would be to tell the J2EE engine directly that it is behind a WebDispatcher, by setting the ProxyMappings (http://help.sap.com/saphelp_nw70/helpdata/en/b8/437d46d4451e4c9ab756e272a1581d/frameset.htm)
Regards,
Holger.

Load-balancing and fail-over between web containers and EJB containers

When web components and EJB components are run in different OC4J instances, can we achieve load-balancing and fail-over between web containers and EJB containers?
null

It looks like there is clustering, but not loadbalancing available for rmi
from the rmi.xml configuration. The application will treat any ejbs on the
cluster as one-to-one look-ups. Orion will go out and get the first ejb
available on the cluster. See the docs on configuring rmi.xml (and also the
note below).
That is a kind-of failover, because if machine A goes down, and the
myotherAejbs.jar are on machine B too, orion will go out and get the bean
from machine B when it can't find machine A. But it doesn't go machine A
then machine B for each remote instance of the bean. You could also specify
the maximum number of instances of a bean, and as one machine gets "loaded",
orion would go to the next available machine...but that's not really
loadbalancing.
That is, you can set up your web-apps with ejbs, but let all of the ejbs be
remote="true" in the orion-application.xml file:
<?xml version="1.0"?>
<!DOCTYPE orion-application PUBLIC "-//Evermind//DTD J2EE Application
runtime 1.2//EN" "http://www.orionserver.com/dtds/orion-application.dtd">
<orion-application deployment-version="1.5.2">
<ejb-module remote="true" path="myotherAejbs.jar" />
<ejb-module remote="true" path="myotherBejbs.jar" />
<ejb-module remote="true" path="myotherCejbs.jar" />
&ltweb-module id="mysite" path="mysite.war" />
... other stuff ...
</orion-application>In the rmi.xml you would define your clustering:
<cluster host="230.0.0.1" id="123" password="123abc" port="9127"
username="cluster-user" />
Tag that is defined if the application is to be clustered. Used to set up
a local multicast cluster. A username and password used for the servers to
intercommunicate also needs to be specified.
host - The multicast host/ip to transmit and receive cluster data on. The
default is 230.0.0.1.
id - The id (number) of this cluster node to identify itself with in the
cluster. The default is based on local machine IP.
password - The password configured for cluster access. Needs to match that
of the other nodes in the cluster.
port - The port to transmit and receive cluster data on. The default is
9127.
username - The username configured for cluster access. Needs to match that
of the other nodes in the cluster.

Integrating Web Dynpro and Portal

Hi people!
I'm starting the development of a simple web site in SAP Enterprise Portal. I created a simple web dynpro application to test the integration between web dynpro and SAP EP. I created a new folder and a new system in portal content. After I add a new page and a new iView (this iView open my webdynpro iview).
My Page open normally in SAP Portal Page Admin, now i would like to know how do for include the Portal Theme, Menu, Status Bar into to my page.
I investigated about wdPortalNavigation and wdPortalNavigationMode, but i don't understand very well how insert the Portal Navigation properties into my Page.
How do I insert this properties in my iView Code? or I should set this properties in Portal Admin?
Somebody have some e-books or tutorials to indicated?
Thanks in advance!!
Marcelo

Hi Marcelo,
First of all welcome to SDN....
For you Webdynpro pages to open with new THEME but not with default theme of portal you have to design new theme in portal and assign that theme to WebDynpro Components
for creation of THEMS please refer these Documents
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/ccb6bcf4-0401-0010-e3bc-ec0ef03e13d1
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/3ea0d790-0201-0010-80b8-b680496a3838
Please Reward Points if Helpfull...
Regards.
Vinit

Difference Between NWBC login and Portal login in GRC10

Hi All,
Can any one tell the difference between NWBC login and Portal Login in GRC 10?
Thanks & Regards
Mohammed Wasim

Hi,
NWBC is web dynpro application running on ABAP stack while Enterprise portal is java application running on Java stack.
Hope this answers your query.
BR,
Mangesh

Export differences between GUI ALV and Portal

Hi,
Have a customer that is able to export reports to Excel using the 'Local File -> Spreadsheet Option'. When this is used in the GUI, the report exports as expected, all columns from the ALV view in the correct columns in excel.
If I run the same report through the customer portal, exporting the data in the same way, when I open the file in excel, each ALV column is combined into 1 column in excel.
Questions:
- Are there any differences between the GUI and Portal when using the exporting functions?
- Would this output be determined by Excel and not the SAP export?
Any assistance or guidance is much appreciated.
Thanks

"319071" and Doug:
The products have different purposes. Portal provides content aggregation, application integration and personalization. Together with the Oracle Application Server infrastructure you also get identity management capabilities such as a centralized LDAP-based user directory and Single Sign-On. HTML DB is a tool for rapid development of database centric web applications. Nothing more, nothing less. Portal allows you to bring together applications built using a variety of technologies. HTML DB is just one of those technologies that happens to be optimized for web development on an Oracle database.
Once you have built your application with HTML DB, you may choose to place a link to it on a portal page. You may even choose to make authentication seamless by making the HTML DB application a Single Sign-On partner application (see: http://www.oracle.com/technology/products/database/htmldb/howtos/sso_partner_app.html). Or, you may want to display some data from a report developed in HTML DB inside a portlet (see: http://www.oracle.com/technology/products/database/htmldb/howtos/omniportlet_index.html)
Granted, Portal does have database centric development capabilities (what used to be called WebDB), but they are not nearly as flexible as HTML DB's. HTML DB lets you control page flow while maintaining session state, has quite sophisticated report building capabilities such as column based sorting and pagination, form building capabilities such as declarative field level data validations, built in field level help, etc.
Sergio

Diference Between Web Intelligence and Web Intelligence Rich Client?

Hey Guys,
Do you know the difference between Web Intelligence and Web Intelligence Rich Client?
I was asked about that but i couldnt help. And i need to make a decision about a Web Intelligence training. I need to decide using one or another.
Thanks
Vegas

Hi Vegas,
The Webintelligence Rich Client (WRC) has all the features of the thin webintelligence client. But WRC makes use of the client processor and memory to do all post query processing while Infoview Webi sends every request to the server for processing.
Thus you won't find any difference between the time taken to retrieve data from the database between these two clients. But there would be huge difference in performance while doing further analysis, formatting with the data. Also you will not need connectivity to the network to do analysis and formatting using the WRC client.
WRC client will help you to just retrieve the data on the fly and let you play around with it while you are traveling with no network connectivity.
Thanks
Mohanraj CP
http://blog,mohanraj.org

Configuration between SAP PI and BPM in SAP PO

Dear Experts,
I am working on SAP PO 7.31 and want to carry out configuration between SAP PI and BPM in SAP PO. I carried the post installation
activities in NWA i.e. CTC.
Helplessly , I could not find any documents and notes to refer the configurations.
Regards
Rebecca

AAEx configuration:
Advanced Adapter Engine Extended (AEX) - Installation and Configuration - III
Configuring SAP BPM and PI runtime:
Configuring Message Processing from PI to BPM - Process Orchestration - SAP Library
Sample BPM
NetWeaver BPM for System-to-System Message Orchestration (Including Migration of ccBPM to NW BPM)
Hope this helps

Web Dispatcher and SNC WAS

If I connect my Web Dispatcher to a WAS that is not running SNC it connects okay but if I point it to a WAS that is running SNC I get SNC related arrors in the file dev_webdisp.log:
[Thr 6968] *** ERROR => invalid service descriptor token 'p:GB\SAPServiceQAS' [ictxxroute_r 2681]
[Thr 6968] *** ERROR => syntax error in text description near line 4 [ictxxroute_r 3135]
[Thr 6968] *** ERROR => IcrUpdateServerPoolFromDescrString() failed 6 [icrxx.c      1762]
If I call the /sap/public/ping service on the WAS directly from Internet Explorer on my PC it connects okay, but if I call the same service from my PC via the Web Dispatcher it failes with the above message in the log file and the below HTTP message:
500 Dispatching Error
Dispatching Error
Error: -26
Version: 6040
Component: HTTP_ROUTE
Date/Time: Tue Feb 07 12:47:50 2006
Module: http_route.c
Line: 2352
Server: UKLONSAP011_QE7_10
Detail: no valid destination server available for '!ALL' rc=13
I cannot find any information relating to the Web Dispatcher and SNC on help.sap.com or OSS.
Do I have to install the SNC library onto the Web Dispatcher server? If so, how do I then reference it?
Any ideas?
Thanks.
Paul

Hi Paul,
SNC library is not required for Web Dispatcher.
The problem seems to be the data the message server provides with the URL http://<msg_host>:<msg_http_port>/msgserver/text/logon?version=1.2
If SNC is activated you will have an entry for RFCS in the data like:
RFCS     bin.wdf.sap.corp     4853     p/secude:CN=BIN, O=SAP-AG, C=DE
The error " invalid service descriptor token 'p:GB\SAPServiceQAS' " indicates that the parser could not parse the response from the message server. Then the server list is empty and you get the "dispatching error".
Maybe the backslash lets the parser struggle. Please check that you have an up to date version running (6.40 kernel patch level > 90). If that is the case, then this problem should be handled by OSS message.
Kind regards,
   Oliver

Difference between web server and application server

Hi Everybody
Could anybody expain difference between web server and application server?
Sharad

Hi there
The difference I know is the application servers provides the containers for the applications to run which is not provided by the web servers.
For example the containers can be an EJB container or JSP container etc

Difference between Web Services and RFC (both Advantages & Disadvantage)

Hi All,
will you please explain the difference between Web Services and RFC (both Advantages & Disadvantage)
Thanks,
jyothi.

Hi,
If you want have a communications between SAP systems within a network, we can go for an RFC.
If you want have communication between SAP systems through a medium like internet, we can probably go for a webservice.
Please refer the following links:
What is the difference between RFC vs. Web service ?
Webservice
If you want to convert an RFC fuction module to an webservice, you can refer the following link,
Using RFC as WebService in WebDynpro
Hope this will help you.
Regards,
Jithin

What is difference between Web Console and Web SAPConsole

Hello,
What is the difference between Web Console and Web SAPConsole.
Thanks,
Milind M.

Hello Milind,
I am not sure that there is any difference between Web console and Web SAP Console.
But of course, there is a lot difference between SAP Console and SAP Webconsole.
Using SAP console you can use mobile data entery with Character support where as with the help of SAP webconsole you can use web supported mobile data entry in which you can use touch screen device.
Hope this helps.
Regards
Arif Mansuri

Differences between Web server and Application server

Differences between Web server and Application server:
We use Tomcat web server or sun Application server to deploy web applications . What is the differeences between these two servers?

http://en.wikipedia.org/wiki/Web_server
http://en.wikipedia.org/wiki/Application_server

SSL Configuration between Web Dispatcher and Portal

Similar Messages

Maybe you are looking for