Using SSL Module to Encrypt HTTP post to external Server

I would like to know if it's possible for a CSM with its SSL module to receive an HTTP POST from our internal web servers, encrypt that POST w/ SSL, and finally to forward the newly created SSL transmission to a remote external SSL server? If it is possible, is this good practice or is it better to let the web server do the encryption?

this is possible.
It is good practice if you do not want to overload your server with the heavy task of encryption/decryption.
If your server is very powerfull and far from being used to its maximum capacity, you can do it on the server.
Another advantage of using an SSL module is that the CSM will see your request in clear text and can therefore perform so *smart* loadbalancing before it gets encrypted by the SSL module.
[ie: cookie stickyness, url hashing, ...]
Regards,
Gilles.

Similar Messages

HTTP POST to PHP server problem

Hi, im trying post a long string to php from a MIDLET, but i have some problems. When i send the whole String, my php server cant receive the request (i have not any response), but, if the string that i send is 1/5 from the original, the process is successful correctly. have somebody any idea?
thx

this is my problem, extracted from another topic on this forum:
"Hi everyone.
I have a problem, and hope someone may help me.
My midlet is uploading sizeable data via http POST.
I'm using WTK104, since i need MIDP1.0
The code have been tried on DefaultGrayPhone emulator
and add-on Nokia's Series 60 Emulator.
Both emulators chunck data, however in different ways.
Deafult one simply produces wrong chunk length (possibly a bug),
Nokia's one always chunks by equal offsets of 2016 bytes.
I'm not using flushing, just close. All the data is being send
at once by one output stream write call.
So I believe (after proper investigation) that MIDP will use chunked Transfer-Encoding method whatever
on such sizeable a data as mine is (up to 50KB) and there's no way to override this behaviour.
Here the main problem appears - Apache refuses to accept chunked encoding in request. The corresposnding message is given in error log
*chunked transfer encoding forbidden*. The returned code is 411 - Content-Length requred. I see no way to override this behaviour of Apache. I was trying to upload my data into Zope web-server, which is my primary goal, but it doesn't handle chunked request either.
Has anyone faced the same problem? Who has managed to POST sizeable data from midlet? Which web servers did you use for that?
Any inputs are highly appreciated!
Anton"
Another:
"> So I believe (after proper investigation) that MIDP
will use chunked Transfer-Encoding method whatever
on such sizeable a data as mine is (up to 50KB) and
there's no way to override this behaviour.Is this true? When I try to set the content-length headers and then write a large byte[] to the output stream I got from an HttpConnection, the HttpConnection appears to remove the content-length header altogether and automatically sets the transfer-encoding to chunked.
Note- I am not calling flush on the outputstream, but I am calling httpconnection.getResponseCode, which I believe calls flush on the outputstream.
Abraham"
I have the identical problem.

HTTP POST FROM EXTERNAL SYSTEM TO SAP AII 4.0

Hello.
We are using SAP AII 4.0 and trying to post from the device controller to SAP AII. We are not clear about the format of the HTTP POST command. Could someone please provide an example of the HTTP POST command from the device controller to SAP AII. I am looking for the format of the HTTP POST command for all field such as port, IP address, etc.
I am looking for a complete example.
Thanks in advance for your help.
Regards,
Bob Berneck

Hi Bob,
Please check the following link for help
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/419e11e7-0801-0010-1e8f-9191ba03f1fc .
Please check the help.sap.com link for help
http://help.sap.com/saphelp_autoid40/helpdata/en/index.htm
If you need some latest doc on AII and DC please mail me at [email protected] or let me know you mail ID
Thanks N Regards
Santosh
Reward if helpful !!!

URLConnection POST to external server requiring keep-alive fails because request is HTTP/1.0

          I have a class that when run as a "main" transmits a HTTP/1.1 post successfully
          to an external server. This external server requires keep-alive connections.
          However when instantiated inside a weblogic servlet container, the post fails
          because the HTTP protocol is set to HTTP/1.0. I have tried this with V5.1 SP11
          and then with V6.1 SP2 with the same result. The code works under Tomcat.
          I can find no way to force HTTP/1.1 in the URLConnection. Any suggestions?


Great. I have a question to BEA folks, if they ever read this newsgroup:
          what is the reason for installing WLS protocol handlers, and, if there is
          one, why the implementation is still buggy? I saw many, many instances when
          code making outgoing connections failed to work in WLS, and the solution is
          always the same - use handler which comes with the JVM.
          Bob Bowman <[email protected]> wrote:
          > <[email protected]> wrote:
          >>If it works as a standalone application and fails inside WebLogic, most
          >>likely this
          >>is caused by WebLogic http handler implementation. You can try to modify
          >>your code
          >>like this:
          >>
          >>URL url = new URL(null, "http://some_url", new sun.net.www.protocol.http.Handler());
          >>HttpURLConnection conn = (HttpURLConnection)url.openConnection();
          >>
          >>(you will need to modify weblogic.policy to allow your code to specify
          >>protocol
          >>handler).
          >>
          >>Bob Bowman <[email protected]> wrote:
          >>
          >>> I have a class that when run as a "main" transmits a HTTP/1.1 post
          >>successfully
          >>> to an external server. This external server requires keep-alive connections.
          >>> However when instantiated inside a weblogic servlet container, the
          >>post fails
          >>> because the HTTP protocol is set to HTTP/1.0. I have tried this with
          >>V5.1 SP11
          >>> and then with V6.1 SP2 with the same result. The code works under
          >>Tomcat.
          >>
          >>> I can find no way to force HTTP/1.1 in the URLConnection. Any suggestions?
          >>
          >>--
          >>Dimitri
          > Worked like a champ! Thanks.
          Dimitri

ICal Server Email invitations HTTP post to SMTP server?

Hello all - We have an iCal server truing to post HTTP to an external SMTP server for email invitations. In the caldav error log:
2010-02-11 17:42:20-0800 [-] [caldav-8009] [AuthorizedHTTPGetter,client] [twistedcaldav.scheduling.imip#error] Could not do server-to-imip request : <twistedcaldav.scheduling.imip.ScheduleViaIMip object at 0x102cc8590> Connection was closed cleanly.
2010-02-11 17:42:27-0800 [-] [caldav-8009] [PooledMemCacheProtocol,client] [twistedcaldav.scheduling.imip#error] Could not do server-to-imip request : <twistedcaldav.scheduling.imip.ScheduleViaIMip object at 0x102cba3d0> iMIP VFREEBUSY REQUESTs not supported.
In the smtp mail.log:
Feb 11 15:19:17 ml01vm postfix/smtpd[11981]: warning: non-SMTP command from unkn
own[X.X.X.X]: POST /inbox HTTP/1.0
Let me know if I can provide more information. I have reset the iCal email invitation /server settings numerous times with no effect.

Apparently the answer is Google Calendar.

Synchronous HTTP POST on Asynchronous Server

I am writing an asynchronous event driven server that must accept synchronous HTTP posts.
For example:
- Client sends HTTP POST to server
- Server fires an internal asynchronous event
- Some time later, another asynchronous event
- Server returns an HTTP response
If I attempt to do this with Servlets, each POST will result in a separate thread that waits for the response. For a high number of posts, this could result in a massive amount of threads. What I would rather happen is that each POST waits for the HTTP response without the server having to waste a thread.
Is there a way to do this?
Thanks.
Chris

Hi,
Thanks for the sharing.J
Jeremy Wu
TechNet Community Support

HTTP Connection to External Server

Hi,
I had some problem with my RFC connection on SM59.
I get this error ICM_HTTP_SSL_ERROR.
I get this error forn dev_icm file
= Success -- SapCryptoLib SSL ready!
Thr 3964
Thr 3964 Started service 443 for protocol HTTPS on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)
Thr 3964 Started service 25025 for protocol SMTP on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)
Thr 3964 Tue Jun 15 00:00:02 2010
Thr 3964 *** WARNING => IcmNetCheck: NiHostToAddr(www.doesnotexist.qqq.nxst) took 5 seconds http://icxxman.c 4586
Thr 3964 Tue Jun 15 00:00:07 2010
Thr 3964 *** WARNING => IcmNetCheck: NiAddrToHost(10.0.0.1) took 5 seconds http://icxxman.c 4606
Thr 3964 *** WARNING => IcmNetCheck: 2 possible network problems detected - please check the network/DNS settings http://icxxman.c 4662
Thr 5520 Tue Jun 15 00:01:07 2010
Thr 5520 *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
Thr 5520 session uses PSE file "D:\usr\sap\EHD\DVEBMGS00\sec\SAPSSLDIBS.pse"
Thr 5520 SecudeSSL_SessionStart: SSL_connect() failed --
secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"
Thr 5520
Begin of Secude-SSL Errorstack
Thr 5520 ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed
ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US"
ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete
Thr 5520 <<
End of Secude-SSL Errorstack
Thr 5520 SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"
Thr 5520 SSL NI-sock: local=192.168.42.112:4581 peer=85.236.67.2:443
Thr 5520 <<- ERROR: SapSSLSessionStart(sssl_hdl=0000000002F34BB0)==SSSLERR_SSL_CONNECT
Thr 5520 *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT http://icxxconn.c 2012
Any help
Thanks

Hi,
I had some problem with my RFC connection on SM59.
I get this error * ICM_HTTP_SSL_ERROR. I get this error forn dev_icm file *
= Success -- SapCryptoLib SSL ready!
Thr 3964 ================================================= Any help Thanks
Thr 3964 Started service 443 for protocol HTTPS on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)
Thr 3964 Started service 25025 for protocol SMTP on host "sapehd1.ssi.ad"(on all adapters) (processing timeout=60, keep_alive_timeout=30)
Thr 3964 Tue Jun 15 00:00:02 2010
Thr 3964 *** WARNING => IcmNetCheck: NiHostToAddr(www.doesnotexist.qqq.nxst) took 5 seconds http://icxxman.c 4586
Thr 3964 Tue Jun 15 00:00:07 2010
Thr 3964 *** WARNING => IcmNetCheck: NiAddrToHost(10.0.0.1) took 5 seconds http://icxxman.c 4606
Thr 3964 *** WARNING => IcmNetCheck: 2 possible network problems detected - please check the network/DNS settings http://icxxman.c 4662
Thr 5520 Tue Jun 15 00:01:07 2010
Thr 5520 *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
Thr 5520 session uses PSE file "D:\usr\sap\EHD\DVEBMGS00\sec\SAPSSLDIBS.pse"
Thr 5520 SecudeSSL_SessionStart: SSL_connect() failed --
secude_error 9 (0x00000009) = "the verification of the server's certificate chain failed"
Thr 5520 >>
Begin of Secude-SSL Errorstack
>>
Thr 5520 ERROR in ssl3_get_server_certificate: (9/0x0009) the verification of the server's certificate chain failed
ERROR in af_verify_Certificates: (24/0x0018) Chain of certificates is incomplete : "OU=VeriSign Trust Network, OU="(c) 1998 VeriSign, Inc. - For authorized use only", OU=Class 3 Public Primary Certification Authority - G2, O="VeriSign, Inc.", C=US"
ERROR in get_path: (24/0x0018) Can't get path because the chain of certificates is incomplete
Thr 5520 <<
End of Secude-SSL Errorstack
Thr 5520 SSL_get_state() returned 0x00002131 "SSLv3 read server certificate B"
Thr 5520 SSL NI-sock: local=192.168.42.112:4581 peer=85.236.67.2:443
Thr 5520 <<- ERROR: SapSSLSessionStart(sssl_hdl=0000000002F34BB0)==SSSLERR_SSL_CONNECT
Thr 5520 *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT http://icxxconn.c 2012
Any help
Thanks

Errors with HTTPS Connection to external server

I am trying to establish a HTTPS connection to an external web site in transaction SM59, but I get ICM_HTTP_CONNECTION_FAILED errors. I get the same errors from a bespoke ABAP program.
I know the request is getting to the web site, but the response is not getting back into SAP.
This is not firewall related.
I have installed and configured the SAPCRYPTOLIB software for SSL support and entered the necessary instance profile parameters.
I have configured STRUST.
SM59 is setup for type G (HTTP Connection to Ext. Server) and port no. 8443
I have started the HTTPS service in SMICM
I have noticed an odd entry in the SCICM trace file, but dont know how to fix.
<i>ERROR => Connection request from (-1/65535/0) to host: mms-sap.sapmms.com, service: 8000 failed (NIECONN_PENDING)</i>
Does anyone have any suggestions?

Thanks for your comments.
I've tried everything in SM59.
SAP refers to both protocols as HTTP.
I think the error is with the response coming back into SAP. SAP doesn't know what to do. It might be DNS related or I might need to configure the ICM somewhere. Oddly the response comes back into sap on port 8000 (which is HTTP). It went out on port 8443 (which is HTTPS).

SOAP over HTTP/POST

Hi everyone,
I'd be eternally grateful if someone could provide me with a quick + easy solution to the following (basic?) task.
I have a user form with the required parameters and a submit button. I have an XML schema which specifies the format for the soap requests and responses. How do I accept user input, wrap it into a soap request, send it via HTTP/POST to a server ( http://localhost:9999/xyz/xyz), wait for a soap response and display the response in a readable format to the user when they press the submit button? Not that hard is it?!
Please try to be a specific as possible because I'm no Java expert. I'm just so confused with all the tutorials about wsdl, bpel, tomcat, jax ws, glassfish etc etc etc!
I use netbeans and java app server 9, though I'm open to other IDEs/servers.
Any help will be greatly appreciated,
Ruth

https://saaj.dev.java.net/source/browse/*checkout*/saSAAJ: aj/saaj-ri/docs/index.html
The Java Web Services Tutorial:
http://java.sun.com/webservices/docs/1.6/tutorial/doc/index.html
(Chapter 5)
SOAP Tutorial: http://www.w3schools.com/soap/default.asp

Sending UTF-8 data via http post

Hello,
I'm generating an xml to be sent via http post method. Before sending, I'd like to convert it to utf-8, but Oracle converts it to utf-16, no matter what I do.
This is what I send with utl_http.write_text:
   convert(l_clob,'AL32UTF8')...but I see utf-16 encoded output on the server side.
NLS_RDBMS_VERSION is 10.2.0.1.0
NLS_CHARACTERSET is EE8ISO8859P2
NLS_NCHAR_CHARACTERSET is AL16UTF16
But I do not use NCHAR variables.
Is http post considered like exporting, where the os's NLS_LANG is important?
Earlier, I managed to save utf-8 xml-files without setting any NLS% params. It was with:
        UTL_FILE.PUT_RAW(
            file   => file_handle,
            buffer => UTL_RAW.CONVERT(utl_raw.cast_to_raw(buffer),
                                      'AMERICAN_AMERICA.AL32UTF8',
                                      'AMERICAN_AMERICA.'||charset
          );But this does not seem to work here, since I have to send 'text/xml'...
Any help is appreciated.
Thanks,
Laszlo

Not really the correct forum.. The methods you are using are more a PL/SQL issue than an XML DB issue. In general Oracle will convert the response into the character set requested by the client, are you sure your client is not requesting UTF-16.
Edited by: mdrake on Nov 27, 2010 5:42 PM

Query regarding encoding/decoding of XML over HTTP Post request

Hello,
I am working on a project where I need to put SMS inside XML and
eventually transfer this XML via HTTP post from/to server/client.
Assuming the SMS to be 7-bit text the XML may look something like
<?xml+version="1.0"?>
<SMS
TESTMESSAGE
</SMS>
This XML when encoded in a HTML post may look something like
http://<IP Address>:<port>/
POST /MessageReceiver.jsp HTTP/1.0
Host: www.SomeHost.net
Content-Type: application/x-www-form-urlencoded
Content-Length: 90
xmlMsg=%3C%3Fxml+version%3D%221.0%22%3F%3E%0D%0A%3CSMS%0D%0A%09TESTMESSAGE0D%0A%3C%2FSMS%3E
This xml is UTF-8 (7-bit ASCII) by default since no encoding format has been specified.
My question - how will the encoding of xml change to - when 8 bit binary data
is transferred via xml.
for e.g.
<?xml+version="1.0"?>
<SMS
<!!!!!BINARY DATA!!!!!>
</SMS>
for such a file how/what shld the encoding be set to.
Further my spec-states the following.
"The content of the XML must respect the encoding. Thus a SMS
containing typically french characters must use ISO-8859-1 encoding"
"This code needs to work with both UTF-8 and UTF-16 standards (ASCII and Unicode). Because of this the parsing code should work internally with UTF-16 and translate up/down to/from UTF-8 (ASCII) only when dealing with the basic HTTP."
could anyone clarify this for me.

The first thing you need to do is clear up some fundamental misconceptions about character encodings. UTF-8 is not the same thing as "7-bit ASCII", and UTF-16 is not the same as "Unicode". Anyway, you're making this a lot more difficult than it needs to be. Just use UTF-8 to encode and decode all messages; it can handle all the characters from any language you're likely to run into.

Working with HTTP-POST Submit Button

I've created a form that uses a submit button with HTTP-POST. I've tested this against a script that displays the fields, however, I'd like to table the posted data to SQL. Can someone show me some code to parse this data with CGI, or PHP?

Yes. At some point you will need to prarse the requests and treat them differently - because a POST is NOT the same as a GET.
Anyway, just place the variables or script-links to the variables in an HTML Form.
Very easy stuff.

Error in http post submit in Acrobat 8 and Reader 8

I am having an error when using the submit button via http post in Adobe 8 and Reader 8.
The http post is not properly formed and only submits the name of the first field and all of the values of the form. All the remaining fields names are not submitted.
It works fine however if I use Adobe 7 or Reader 7.
Anyone else have this error.
Quinten

I have the same problem with Reader 8. It's a bug. In http request ampersand is missing. Reaser 8 sends:
PAR1=value_of_par1PAR2=value_of_par2PAR3=value_of_par3
but it may be:
PAR1=value_of_par1&PAR2=value_of_par2&PAR3=value_of_par3
Michal

SSL module - does server key must have a password?

Hi,
I'm trying to install server certificate, PEM formatted into SSL module. The key I've received is stripped off the challange password. Is it possible to import such a key without pass? "crypto ca import server.com PEM terminal xxx" seems to not allow for this.
tia

Yes, the SSL module must have a password for the server key. It is not possible to import the key without the password.

SSL VPN IP Address Assignment from IAS radius server

Can I use SSL VPN IP Address Assignment from IAS radius server?it can be done with acs server.are there some differ from the acs and IAS?

Hi,
I will suggest to setup a sniffer capture with ACS and look for the attribute that ACS sends for IP Address Assignment, once you know the attribute apply it on the IAS.
If you have any question do not hesitate to contact me.

Using SSL Module to Encrypt HTTP post to external Server

Similar Messages

Maybe you are looking for