WD ABAP: logon via HTTPS

Hi,
next question...
on logon to my WD application I get the logon screen with the following text:
No switch to HTTPS occurred, so it is not secure to send a password
but I have to enter a password on this screen although it is not save to send a password... anyway the password I enter will be sent to SAP server but after that I need to enter the password ones again on a new screen with the following text:
SSO logon not possible; no logon ticket due to incorrect configuration
Choose "Logon" to continue A dialog box appears in which you can enter your user and password
so SAP already verified the password and the user but does not log me on until I entered the same a second time...
my question: what do I need to config to only enter the user and password ones?

Have a look at the following help link:
http://help.sap.com/saphelp_nw2004s/helpdata/en/af/0489ce55002f44a8c927371bedf719/frameset.htm
It covers security aspects of Web Dynpro ABAP. It has links to how to setup SSL (HTTPS) amonst other topics that should be read.

Similar Messages

User Authentication Failed via http BUT not with Visual Administrator !!?

OS : Win 2k3 Server UK * DB : SQL Server 2005
SAP Netweaver 2004s Application Java
Hi All,
Since a couple of days, I have a problem concerning authentication to the java apllication on a SAP Netweaver 2004s.
Using the user Administrator, I CAN logon the Visual Administrator tool, with the same user I tried to logon via http://host:port/nwa without success.
At the beginning, I was thinking about a problem of password then I enabled the emergency user SAP*, the problem was the same. Ok with Visual Administrator but not via http.
Here is two logs found in folder : D:\usr\sap\SID\JC02\j2ee\cluster\server0\log\system\
 security.3.log
 #1.5#001871E5EA3A00550000006D0000172800043B836D838427#1191335570983#/System/Security/Audit#sap.com/com.sap.security.core.admin#com.sap.security.core.util.SecurityAudit#Guest#0####5aac137070f411dcc513001871e5ea3a#SAPEngine_Application_Thread[impl:3]_11##0#0#Warning#1#com.sap.security.core.util.SecurityAudit#Plain###Guest | LOGIN.ERROR | null | | Login Method=[default], UserID=[Administrator], IP Address=[192.168.10.125], Reason=[Authentication did not succeed.]#
 server.0.log
 #1.5#001871E5EA3A0052000000130000172800043B835E3661D1#1191335314249#/System/Server/SLDService##com.sap.sldserv.SldServerFrame######c1a349a070f311dcaa68001871e5ea3a#SAPEngine_System_Thread[impl:5]_71##0#0#Warning#1#com.sap.sldserv.SldServerFrame#Plain###Failed to collect SLD data. Failed to send HTTP data: 401 : Unauthorized. Please check if the target SLD system is available and the SLD bridge is started there.#
 I tried to connect http://host:port/sld same problem User Authentication Failed
Do you have an idea for me? Why a user can connect via Visual Administrator and not via the http interface?
Thanks in advance
Yves

Hi,
I found the solution this last week-end.
This behavior let's thinking to a problem of authentication.
But the problem was in SQL, an index was missing in table J2EE_CONFIG, called J2EE_CONFIG_I3
Cheers
Yves

Calling webservices from ABAP via https/ssl with p12 certificates.

Hi all,
I have a problem with calling an external webservice via HTTPS.
I configured my system as indicate in the blog /people/jens.gleichmann/blog/2008/10/31/calling-webservices-from-abap-via-httpsssl-with-pfx-certificates but when I check the RFC connection the result is: ICM_HTTP_SSL_ERROR.
I check the ICM monitor and this is the result:
[Thr 11] Thu May 26 16:02:57 2011
[Thr 11] *** ERROR during SecudeSSL_SessionStart() from SSL_connect()==SSL_ERROR_SSL
[Thr 11] session uses PSE file "/usr/sap/SV5/DVEBMGS10/sec/SAPSSLHTTPS1.pse"
[Thr 11] SecudeSSL_SessionStart: SSL_connect() failed
secude_error 536875072 (0x20001040) = "received a fatal SSLv3 handshake failure alert message from the peer"
[Thr 11] >> Begin of Secude-SSL Errorstack >>
[Thr 11] WARNING in ssl3_read_bytes: (536875072/0x20001040) received a fatal SSLv3 handshake failure alert message from the peer
WARNING in ssl3_output_cert_chain: (12354/0x3042) No hierarchy certificate in FCPath
WARNING in reduce_FCPath_by_Issuer: (12354/0x3042) No hierarchy certificate in FCPath
[Thr 11] << End of Secude-SSL Errorstack
[Thr 11] SSL_get_state() returned 0x000021d0 "SSLv3 read finished A"
[Thr 11] Server's List of trusted CA DNames (from cert-request message):
[Thr 11] #1 " certificate 1
[Thr 11] #2 " certificate 2
[Thr 11] SSL NI-sock: local=ip peer=ip2
[Thr 11] <<- ERROR: SapSSLSessionStart(sssl_hdl=6000000000652010)==SSSLERR_SSL_CONNECT
[Thr 11] *** ERROR => IcmConnInitClientSSL: SapSSLSessionStart failed (-57): SSSLERR_SSL_CONNECT [icxxconn_mt.c 2012]
SAP_ABA 700 0012 SAPKA70012 Componenti validi per tutte le applicazioni
SAP_BASIS 700 0012 SAPKB70012 Componenti di base SAP
PI_BASIS 2005_1_700 0012 SAPKIPYJ7C PI_BASIS 2005_1_700
ST-PI 2008_1_700 0001 SAPKITLRD1 SAP Solution Tools Plug-In
SAP_BW 700 0013 SAPKW70013 SAP NetWeaver BI 7.0
SAP_AP 700 0010 SAPKNA7010 Piatt. d'applicazione SAP
CCM 200_700 0010 SAPK-27010INCCM CCM 200_700 : Add-On Supplement
SRM_PLUS 550 0010 SAPKIBK010 SRM_PLUS per mySAP SRM
SRM_SERVER 550 0010 SAPKIBKT10 SRM_SERVER
BI_CONT 703 0001 SAPKIBIIP1 Contenuto Business Intelligence
ST-A/PI 01L_BCO700 0000 - Servicetools for other App./Netweaver 04
What do you think about it?
Best regards,
Norberto.

Don´t forget to set your proxy settings! Be sure that the application server could establish a connection to the external server.
From the BLog.
Thr 11 WARNING in ssl3_read_bytes: (536875072/0x20001040) received a fatal SSLv3 handshake failure alert message from the peer
From the Error.
Have you looked into the above details?
Thanks
SM

Using ADFS authentication to perform SSO via HTTP GET request

Hi,
Can i authenticate users (those users are clients, at home) to a web application using ADFS without SAML tokens?
The situation is that i want the clients to perform SSO to the website via a link they receive in their mailboxes.
I thought about a solution that combines JWT in a URL link that each user will get to his private mail. this link will contain the users' claim (such as ID Num, given from AD DS Server dedicated especially for them).
Thus, the user will receive an email with a link that already contains a short period of time JWT to perform SSO to the webapp.
Is it possible ? anybody heard about a similar solution ?

Sandra
Thanks for your message
Here is the my requirment
The basic flow of a Where 2 Get It REST API call is:
1) create the required XML structure,
2) URI encode it,
3) make a HTTP GET request,
4) then parse the return XML document.
Currently i have some data in ABAP structure with 5 fields, i need to create XML from the those 5 fields,and needs to be URI
encode it, and then needs to make a HTTP get request to connect Where to Get It REST API, finally it will return XML document via HTTP Get request , and then needs to convert the return XML to ABAP structure for further processing .the above 4 points will be implemented in my report.
Any body could help on this

ABAP proxy to HTTP sycnchronous scenario.

Hi All,
I have an ABAP proxy to HTTP syncronous scenario in which the proxy through PI makes an HTTP request to a third party to download a PDF.Once the PDF is sucessfully downloaded we need to send an acknowledgement to ECC system that the download was sucessful and also place the PFD file in an FTP server as well.
Looking forward for any possible ways that the above scenario could be achived in once interface.We are open to use ccBPM to achive this.
Thanks in advance.
Best Regards,
Bhanu.

Hi Bhanu,
if this is a sync request to a HTTP receiver (to initiate with the request a PDF upload) you will expect to get a response back to the Proxy sender.
So following the described implementation the response will provide the information about un/successfull PDF load
from the http receiver (so this partner has to provide a response in a sync connect!!!).
If you need the PDF to be moved back to a location near to the proxy sender additionally to the response message the receiver of the proxy trigger has to return both in the sync response but the proxy is not able to receive an attachment.
And... as I know HTTP adapter does not allow to handle attachment. This is only possible with SOAP !
So in such a case the PDF needs to be provided with another adapter (which would allow to use a sync connect Proxy-> HTTP and another one async from the PDF loader via file adapter (file -> file). So this will not require a BPM too!
a) Proxy-> PI -> HTTP (sync)
b) FTP -> PI -> FTP (async)
Result: No BPM required!
Regards
Dirk

Explicit logon via ITS

Hi,
Is there a way to avoid SSO, and to pass an URL parameter to explicitly force the user to logon?
The problem is - we have an URL link, pointing to ABAP transaction via ITS. We want to make user to select explicitly an ABAP client. To my knowledge, it is possible only using the logon screen.
I suppose there is some URL parameter "logon=true", similar to "~transaction" parameter?
Thanks and regards
Konstantin

may in the place where you have the link provide and option to change the client and generated url based on that.
not so nice solution:
send a wrong userid/pwd via url and it will force the log on screen to show up
sap/its/webgui?sap-client=XXX&sap-language=EN&~transaction=SE38&sap-user=Enter_User_name&sap-password=wwww

Jabber SSO for PKI / Kerberos LogOn via Card&fingerPrint

Is there any solution (existing or planned) for Jabber SSO when users are not using UserName/Password identification when they are logging in to their PC ?
Instead they are using a PKI / Kerberos LogOn via Card&fingerPrint ? and for this LogOn method once opening Jabber Client how can they be LoggedOn without any need for further identification?

Hi Andrzej Kazmierczak,
Thanks a lot for the reply,
If we configure certificate based authentication in IIS (certificate mapping) it doesn't use kerberos provider (at least that's what I have seen through network monitor captures).
guess probably the presentation of intent in my question was wrong.. my bad..sorry
My requirement is to configured the SSO environment based on "kerberos Authentication" (where the pre-authentication happens not via user name and password but through USER IDENTITY certificates.)
http://msdn.microsoft.com/en-in/library/cc238455.aspx
When smart cards are implemented with kerberos, pre-authentication (for kerberos) happens through KDC validating the smart card PKI certificate (x.509), I want to achieve the same thing in my lab without smart card (i.e.. only with user identity certificate
installed over a device).
There are few related information available over the web but for Linux based (MIT kerberos) environment. However according the document available in the link(http://msdn.microsoft.com/en-in/library/cc238455.aspx), it should be possible even in Microsoft
environment.That's exactly is my requirement.
I am very new to kerberos topic, please correct me if my implementation understanding is wrong somewhere.
Thanks,
GK

Try expose svn via http, but Location directive does not work.

Hello everyone,
I used svn exposed via http in OSX 10.6 and 10.7 using collabnet.
Now I take OSX server 10.8 and installed svn inside XCode.
SVN is correctly installed, apache respond to default site.
I copied the modules dav_svn_module and authz_svn_module compiled on my machine with same svn version of XCode [version 1.6.18 (r1303927)] .
I created a file into /etc/apache2/other called svn.conf that contain follow code:
LoadModule dav_svn_module libexec/apache2/mod_dav_svn.so
LoadModule authz_svn_module libexec/apache2/mod_authz_svn.so
<Location /repo>
DAV svn
SVNPath '/Volumes/VMware HD/svn/repository'
</Location>
Checking if module are loaded with sudo apachectl -t -D DUMP_MODULES i obtain:
Loaded Modules:
dav_svn_module (shared)
authz_svn_module (shared)
Syntax OK
So file svn.conf is loaded and the module too.
When I try to check via browser with http://localhost/repo I obtain in /var/log/apache2/error_log the following error:
[Wed Feb 13 12:41:12 2013] [error] [client 192.168.1.114] File does not exist: /Library/Server/Web/Data/Sites/Default/repo
Is Location directive failing?!
How can I expose the right repository location instead of default site?

Oeren,
I stumbled across this little tidbit buried in the BI Publisher forum: Dynamic Images in rtf
Glad you are up and running!
Joshua

Limitation on data that can be fetched (ABAP RFC) via a Web Service?

Hi,
Is there any limit on the data that can be fetched via a Web Service (ABAP exposed as Web Service). I am trying to fetch PI monitoring data from ABAP Tables via a Web Service and there can be thousands of messages proceesed say in a day and what if user is provided the option of fetching messages for a specefic duration.
Please advise.
Neha

Hello my friend
If I understand your question correctly, there's an environment variable CPIC_MAX_CONV handles sessions between integration engine and adapter engine (ABAP and Java). By default, the value of this variable is 500, and you might want to increase it to 1000 at least, depends on system throughput. Recommended value from SAP for Production is 5000.
Hopefully it's helpful,
Effan

Office Web Apps - Preview not appearing when acccessing via HTTPS

I have installed Sharepoint 2013 and Office Web Apps, set the wopibinding, and set the wopizone to be https-external. Everything seems to work fine if accessing the web app using HTTP (can open, edit, preview office web app (WAC) documents)... but if
I access via HTTPS then I run into a mixed content error when trying to preview the WAC documents... I can open them and edit them without issue using office web apps inside the browser though just not preview.
If I select "New document" it also takes a while to load and displays a blank pop up window... assume it must be related
Error message:
XMLHttpRequest cannot load http://xxxx.org.nz/Docs/_layouts/15/inplview.aspx?List={6E…65723B96E}&ViewCount=1&IsXslView=TRUE&IsCSR=TRUE&IsRibbon=TRUE&Cmd=EcbView.
No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'https://xxxxxx' is therefore not allowed access.
[blocked] The page at 'https://xxxxx.org.nz/xx.aspx' was loaded over HTTPS, but ran insecure content from 'http://xxxxxx/Docs/_layouts/15/WopiFrame.aspx?sourced…%20big%20wide%20inter%20web%2Edocx&action=interactivepreview&wdSmallView=1':
this content should also be loaded over HTTPS.

Hi ,
Before you configure SharePoint 2013 to use Office Web Apps Server via HTTPS, make sure that you have set up Office Web Apps Server by following the steps in Deploy
a single-server Office Web Apps Server farm that uses HTTPS or Deploy a multi-server, load-balanced Office Web Apps Server farm
that uses HTTPS.
Best Regards,
Eric
Eric Tao
TechNet Community Support

Error while invoking the ABAP Proxy via SOAP Adapter

Hi,
My scenario involves SOAP Client invoking a webservice hosted in PI which in turn invokes the ABAP Proxy asyncronously.
SOAP Client -> PI -> ECC (ABAP Proxy) . This works fine.
Next , I have exposed the ECC Service Interface as webservice using SOA Manager transaction. Now, once the service is created using SOAManager, i replaced the XI Adapter with SOAP Adapter and provided the target URL as the URL provided by the SOAManager.
SOAP Client -> PI -> ECC (ABAP Proxy via SOAP Adapter)
With this approach, i am encountering the below error message
2009-05-29 12:17:55 Error Adapter Framework caught exception: null
2009-05-29 12:17:55 Error Delivering the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException.
Any ideas on the above errror message? Any pointers or inputs will be appreciated.
Thanks,
Vinayak Kamath

> 2009-05-29 12:17:55 Error Adapter Framework caught exception: null
> 2009-05-29 12:17:55 Error Delivering the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException.
This is a generic error message which does not have any information about the error which has occurred.
Do you see any error messages in the SOAP client?
Regards
Stefan

Sending a dom via http Post

Hi,
for some reason unknown to me whenever I try to send a dom via http Post I get the following error:
org.xml.sax.SAXParseException: The root element is required in a well-formed document.
This is the source code:
package com.cyberrein.payunion.transaction;
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.util.*;
//xml lib
import org.w3c.dom.Document;
import org.w3c.dom.Element;
//weblogic xml lib
import weblogic.apache.xerces.dom.DocumentImpl;
import weblogic.apache.xml.serialize.DOMSerializer;
import weblogic.apache.xml.serialize.XMLSerializer;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
public class Xmltest extends HttpServlet {
//Initialize global variables
public void init(ServletConfig config) throws ServletException {
super.init(config);
//Process the HTTP Request
public void service(HttpServletRequest request, HttpServletResponse response) throws ServletException, IOException {
// Retrieve transaction data from HttpServletRequest.
try {
DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
dbf.setValidating(false);
DocumentBuilder db = dbf.newDocumentBuilder();
Document docIn = db.parse(request.getInputStream());
String code = "XX";
String tranID = "000000";
String message = "This Card Is Invalid. Transaction Discontinued";
//Output dom
Document docOut = new DocumentImpl();
Element e = (Element)docOut.createElement("TransactionResponseData");
e.setAttribute("Code", code);
e.setAttribute("TransactionID", tranID);
e.setAttribute("Message", message);
docOut.appendChild(e);
FileOutputStream fos;
fos = new FileOutputStream("/victory");
DOMSerializer serX = new XMLSerializer(fos,null);
serX.serialize(docIn);
DOMSerializer ser = new XMLSerializer(response.getOutputStream(), null);
     ser.serialize(docOut);
     } catch (Throwable e) {e.printStackTrace();}
//Get Servlet information
public String getServletInfo() {
return "com.cyberrein.payunion.transaction.Xmltest Information";
package com.cyberrein.payunion.transaction;
import org.w3c.dom.*;
import org.apache.xerces.*;
import org.apache.xerces.dom.*;
import org.apache.xerces.parsers.*;
import org.apache.xml.serialize.*;
import org.xml.sax.*;
import java.net.*;
import java.io.*;
public class CardClient {
private String sURI;
public BufferedReader in
= new BufferedReader(new InputStreamReader(System.in));
public CardClient(String serverURI) {
sURI = serverURI;
public Document test(){
Document docIn = null;
try
//XML Document impl
     docIn = new DocumentImpl();
//Create the root element
     Element t = docIn.createElement("TransactionData");
Element k = docIn.createElement("Payunion.com");
k.appendChild( docIn.createTextNode("North American server") );
t.appendChild(k);
//Set attributes
t.setAttribute("cardnumber", "4444444444444444");
t.setAttribute("amount", "3000.67");
t.setAttribute("name", "tolu agbeja");
t.setAttribute("cvv2", "001");
t.setAttribute("pu_number", "ejs:pupk:23456");
t.setAttribute("expirydate", "0903");
t.setAttribute("address", "100 peachtree industrial");
t.setAttribute("zipcode", "30329");
docIn.appendChild(t);
catch (Throwable te)
te.printStackTrace();
return docIn;
public Document sendRequest(Document doc) {
     Document docOut = null;
     try {
     URL url = new URL("http://" + sURI);
     HttpURLConnection conn = (HttpURLConnection) url.openConnection();
conn.setRequestMethod("POST");
     conn.setDoInput(true);
     conn.setDoOutput(true);
     OutputStream out = conn.getOutputStream();
BufferedReader br = new BufferedReader(new InputStreamReader(conn.getInputStream()));
XMLSerializer ser = new XMLSerializer( out, new OutputFormat("xml", "UTF-8", false) );
ser.serialize(doc);
while(!br.ready()){}
     DOMParser parser = new DOMParser();
     parser.parse(new InputSource(br));
     docOut = parser.getDocument();
catch (Throwable et)
     et.printStackTrace();
     return docOut;
public static void main(String []args)
CardClient c = new CardClient("cyber1:7001/xmltest");
try
Document doc = c.sendRequest(c.test());
Element responseMessage = (Element)doc.getElementsByTagName("TransactionResponseData").item(0);
String message = responseMessage.getAttribute("Message");
String tranID = responseMessage.getAttribute("TransactionID");
String code = responseMessage.getAttribute("Code");
System.out.println(message);
System.out.println("");
System.out.println("The Response Code Is: "+code);
System.out.println("");
System.out.println("The Transaction ID Is: "+tranID);
catch(Exception ex)
ex.printStackTrace();
All comments will be appreciated!!

Hi, thanks for your reply i knew the FileUplaod was the way forward.
I read topics advising to use the FileUpload and tried the following but it did not seem to work ( i get an HTTP Internal Server error when i try that):
try
DiskFileUpload upload = new DiskFileUpload();
boolean isMultipart = FileUpload.isMultipartContent(request);
if( isMultipart )
List items = upload.parseRequest( request );
Iterator iter = items.iterator();
while( iter.hasNext() )
FileItem fileItem = ( FileItem ) iter.next();
File uploadedFile = new File("myreceivedfile.zip");
fileItem.write( uploadedFile );
}catch (Exception e)
System.out.println("RECEIVER: " + e.getMessage());
Also DiskFileUpload,isMultipartContent and parseRequest have a line going through the middle (horizontal middle).
Edited by: Overmars08 on Jun 23, 2009 5:35 AM
Edited by: Overmars08 on Jun 23, 2009 5:36 AM

Problem downloading a file via http

Hi
I'm just getting started with WLS (sp5) and am having a problem downloading
a file via http. The document is stored in the main html docs directory and
whenever I link to it or try to download it directly (eg:
http://<host>:<port>/myfile.doc) I get the following error in a message box:
Your current security settings do not allow this file to be downloaded.
Can anyone point me in the right direction as to where I grant permissions
to do this - I've tried using the weblogic.security.URLAclFile and adding
the directory as a weblogic.io.fileSystem (a desperation move, I know).
Thanks in advance,
Peter Villiers

PLEASE IGNORE THIS POST
The problem was caused by someone (me though I honestly don't remember doing
it), setting the content security level to high in my web browser which
stopped this type of download.
Peter

Error while loading the runtime repository via HTTP

Hi Experts,
I am trying to delete an enhancement and when I enter the component name and the enhancement set in BSP_WD_CMPWB. I get the following error when right click the enhanced view and select delete : Error while loading the runtime repository via HTTP. How do I delete this enhancement?
Regards
Abdullah Ismail.

if for some reason the runtime repository is not coherent, you get an error each time you try to read it (and this is the case when you open a component using the transaction BSP_WD_CMPWB)
this is because the XML file is interpreted by a CALL TRANSFORMATION statement, and any incorrect node will raise an uncaught exception
solution:
enhanced view is contained into BSP application you have created the first time you enhanced the component
go to SE80 and enter the BSP application where your objects are stored (the name you provided the first time)
there you can modify directly the objects, including the runtime repository which is stored under node "Pages with flow Logic"
once the correction is done, you can access again your component through transaction BSP_WD_CMPWB (and delete it properly if this is what you want to do)

File download via servlet doesn't work with IE via https

I have a URL from a jsp page which points to a struts action servlet. This works with firefox via http and https. With IE it works via http but it doesn't work via https. The error message I get is "Internet Explorer cannot download ...File_name.doc from Server_name.
Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later."
Here is my code.
public ActionForward execute(ActionMapping mapping, ActionForm form,
               HttpServletRequest request, HttpServletResponse response)
               throws Exception {
          String attachmentURL = AppSettings.get("EAIAttachmentURL");
          String encodingScheme = AppSettings.get("EAI_encoding");
          String filename = request.getParameter("URL");
          String fileStr = URLEncoder.encode(filename, encodingScheme);
          fileStr = fileStr.replaceAll("\\+","%20");
          URL targetURL = new URL(attachmentURL + "/" + fileStr);
          URLConnection connection = targetURL.openConnection();
          connection.setDoInput(true);
          connection.setDoOutput(false);
          connection.setAllowUserInteraction(false);
          BufferedInputStream attachmentStream = new BufferedInputStream(
                    connection.getInputStream());
          * Setting the content disposition filename, so that the
          * attachment preserves the original filename
          response.setHeader("Content-Disposition",
                    " attachment; filename=" + filename);
          if (connection.getContentType() != null) {
               response.setContentType(connection.getContentType());
          else {
               response.setContentType("application/octet-stream");
          response.setContentLength(connection.getContentLength());
          response.setHeader("Pragma", "public");
          response.setHeader("Cache-Control", "public, max-age=-1, must-revalidate");
          if ( connection.getContentEncoding() != null ) {
               response.setHeader("Content-Encoding",
                         connection.getContentEncoding());
          BufferedOutputStream responseStream = new BufferedOutputStream(
                    response.getOutputStream());
          byte[] buffer = new byte[4096];
          int bytesRead;
          try {
               while ((bytesRead = attachmentStream.read(buffer)) != -1) {
                    responseStream.write(buffer, 0, bytesRead);
          } catch (Exception e) {
               log.error("AttachmentProxy error: " + e.getMessage());
          } finally {
               if (attachmentStream != null) {
                    attachmentStream.close();
               if (responseStream != null) {
                    responseStream.flush();
                    responseStream.close();
          return null;
There is a bug with IE when downloading via https according to Microsoft support site. Refer to http://support.microsoft.com/default.aspx?scid=kb;en-us;812935
According to this bug, I have set the response header - "pragma" to public and "cache-control" to public. I've also unchecked the Do not save encrypted pages to disk setting in IE Options, Advanced tab.
Has anyone come across this problem or a similar problem. Any help is appreciated. Thanks.

I have a URL from a jsp page which points to a struts action servlet. This works with firefox via http and https. With IE it works via http but it doesn't work via https. The error message I get is "Internet Explorer cannot download ...File_name.doc from Server_name.
Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later."
Here is my code.
public ActionForward execute(ActionMapping mapping, ActionForm form,
               HttpServletRequest request, HttpServletResponse response)
               throws Exception {
          String attachmentURL = AppSettings.get("EAIAttachmentURL");
          String encodingScheme = AppSettings.get("EAI_encoding");
          String filename = request.getParameter("URL");
          String fileStr = URLEncoder.encode(filename, encodingScheme);
          fileStr = fileStr.replaceAll("\\+","%20");
          URL targetURL = new URL(attachmentURL + "/" + fileStr);
          URLConnection connection = targetURL.openConnection();
          connection.setDoInput(true);
          connection.setDoOutput(false);
          connection.setAllowUserInteraction(false);
          BufferedInputStream attachmentStream = new BufferedInputStream(
                    connection.getInputStream());
          * Setting the content disposition filename, so that the
          * attachment preserves the original filename
          response.setHeader("Content-Disposition",
                    " attachment; filename=" + filename);
          if (connection.getContentType() != null) {
               response.setContentType(connection.getContentType());
          else {
               response.setContentType("application/octet-stream");
          response.setContentLength(connection.getContentLength());
          response.setHeader("Pragma", "public");
          response.setHeader("Cache-Control", "public, max-age=-1, must-revalidate");
          if ( connection.getContentEncoding() != null ) {
               response.setHeader("Content-Encoding",
                         connection.getContentEncoding());
          BufferedOutputStream responseStream = new BufferedOutputStream(
                    response.getOutputStream());
          byte[] buffer = new byte[4096];
          int bytesRead;
          try {
               while ((bytesRead = attachmentStream.read(buffer)) != -1) {
                    responseStream.write(buffer, 0, bytesRead);
          } catch (Exception e) {
               log.error("AttachmentProxy error: " + e.getMessage());
          } finally {
               if (attachmentStream != null) {
                    attachmentStream.close();
               if (responseStream != null) {
                    responseStream.flush();
                    responseStream.close();
          return null;
There is a bug with IE when downloading via https according to Microsoft support site. Refer to http://support.microsoft.com/default.aspx?scid=kb;en-us;812935
According to this bug, I have set the response header - "pragma" to public and "cache-control" to public. I've also unchecked the Do not save encrypted pages to disk setting in IE Options, Advanced tab.
Has anyone come across this problem or a similar problem. Any help is appreciated. Thanks.

WD ABAP: logon via HTTPS

Similar Messages

Maybe you are looking for