Minimal https configuration on 640_REL

[Former Member]

To Basis/Netweaver Experts:

Don't want to beat this one to death, but so far I haven't found any satisfactory answer to this one yet.

What are the necessary parameter settings for having https service run without configuring STRUST, certificates or SNC connections?

I have identified some of them, but I know these are not all of them:

1. rdisp/start_icman jest = 'true'

2. icm/host_name_full = full domain name (www.company.com)

3. icm/HTTPS/verify_client = 0

4. ssf/name = SAPSECULIB (and related)

5. icm/server_port_n - PROT=HTTPS, PORT=NNNN, EXTBIND=1, TIMEOUT=25

[eddy_declercq]

Hi,

Check this weblog from Gregor:

/people/gregor.wolf3/blog/2005/10/11/setup-https-ssl-for-the-sneak-preview-sap-netweaver-04-abap-edition-on-windows

Eddy

[Former Member]

Eddy,

I know this weblog. It has been very helpful, but I am after the configuration without logon tickets, STRUST, certificates, etc.

I think it can be done, but what are the parameter settings?

[gregorw]

Hello Greg,

AFAIK there is no way to configure HTTPS without setting up STRUST and Certificates. Certificates are a essential Part of the SSL Protocol. What do you want to acheive exactly?

Regards

Gregor

[Former Member]

Ok, let me be more precise, https configuration without any entries in the TWPSSO2ACL table.

I think STRUST writes into that table, but I'm not positive.

[eddy_declercq]

Hi,

Pls don't forget to reward points and close the question if you find the answers useful.

Eddy

[Former Member]

Eddy,

Would be glad to do that, but haven't seen anything new, so my question remains open...

[Former Member]

Eddy,

Would be glad to do that, but haven't seen anything new, so my question remains open...

[gregorw]

Hello Greg,

I've checked in the system which I used for the weblog and my Table TWPSSO2ACL is empty. What problem do you have with it?

Regards

Gregor

[Former Member]

Gregor,

I don't have a problem with that particular table. I only conclude that STRUST doesn't write into it if you have entries under STRUST but not in that particular table.

Also, according to this link: http://help.sap.com/saphelp_ep50sp2/helpdata/en/d3/41c8ecb31d11d5993800508b6b8b11/content.htm

seems like TWPSSO2ACL is required for portals PSE only...SSL connections for server and clients must be stored elsewhere.

There is OSS 510007, but there are some commands at the OS level. This, I think, is taken care of, in your weblogs for Windows and Linux.