FTPS Reciever Channel: Connection Time Out

[Former Member]

Hello Guys,

I have configured a receiver FTPS channel following the guidelines as per the below links:

http://scn.sap.com/people/rajasekhar.reddy14/blog/2010/04/13/how-to-configure-ftps-in-file-adapter

https://help.sap.com/saphelp_nw04/helpdata/en/bc/bb79d6061007419a081e58cbeaaf28/content.htm

http://scn.sap.com/docs/DOC-26940

However, my client doesn't have any key pair certificate. They had just provided me with the SSL certificate and an intermediate certificate.

Therefore, I didn't check the "Use X.509 Certificate for client authentication" checkbox. But I did upload my certificates under the keystore "TrustedCAs".

Now when I run the scenario, it tries to establish the connection but after some time its says connection out. Please see the Error

Also traced the message through XPI_INSPECTOR and I found that it is actually trying to find the keypair value.

Why does my channel look for keypair if I haven't checked "Use X.509 Certificate for client authentication" checkbox? Just because I have uploaded the certificates under TrustedCAs?

Also , is it compulsory to have a keypair value for using FTPS channel ? Because my client doesn't have that, should I approach for some other kind of channel to support this?

Note: I am also using pgp encryption module for this channel.

Please guide!

Thank you!

Regards,

Simran

[Harish · Accepted solution]

Hi Simran,

Timeout can also occure because FTP server is down or not reachable from PI. Please check if the server is reachable from PI.

regards,

Harish

[Former Member]

Is there any documentation for certificate installation for the Basis team to follow?

[Former Member]

Hi ,

You need document for SSL certificate then its here

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/964f67ec-0701-0010-bd88-f995abf4e...

Thanks.

[Former Member]

Hello Anshu,

Thank you for the document.

But I am not generating any certificate key pair. I have issue with my client's certificate chain.

[Former Member]

Hi ,

I am not getting one thing from the screen shot you have provided .Why its showing just one certificate?.Have you maintained all the certificates correctly and ensured that these are not expired ones ?

Thanks

[Former Member]

Please check this blog

[SAP XI] – SSL Certificate installation procedure for SAP J2EE engine 6.30 – steps in visu...

Thanks

[Former Member]

>>Have you maintained all the certificates correctly

I just saved the 3 .txt files (Certificate, Intermediate and Root) provided by my client as .crt.

Then I imported the same under "TrustedCAs" as "X.509 Certificate". The order that I maintained while importing the files was Certificate.crt, then Intermediate.crt and lastly Root.crt.

>>ensured that these are not expired ones ?

No they are not expired.

[Former Member]

I don't see any image under this link. But as per the words I think its again talking about the Key pair certificate which is not required in my scenario.

[Former Member]

Some issue is there for sure as I can get from your screen shot because certificate chain is not there.Ideally it should be like this .

[Former Member]

I understand that the first certificate issuer is missing itself even though its there in the "TrustedCAs".

Is there any other way to link them in PI manually other than just having them in NWA?

[Former Member]

Hello Everyone,

I am still stuck at the same error. I tried importing the certificates chain with Certificate, intermediate and Root, under "TrustedCAs". Still it is not able to find out the chain in the certificates. Here is the SSL Debug:

[Former Member]

I went through different links:

http://scn.sap.com/thread/211587

http://scn.sap.com/thread/149294

http://scn.sap.com/thread/123179

And after covering up all the points , I found that SSL certificate provided by the customer itself had an issue under "Certification Path" tab.

I have asked my client to provide me correct certificate. Lets see if it works.

[Pranil1]

Hi Simran,

Maybe FTP server is having intermittent connectivity problems and it is causing the FTP Adapter to hang.

Please check note 849089.

Also below timeouts related links would help you.

How To... Investigate Timeouts In Synchronous XI/PI Scenarios

Regards,

Pranil.

[Former Member]

Yes Harish, it is reachable. I have tried from my PI server.

I have checked with my networking team as well. Everything is in place for firewall as well.

[Harish]

Hi Simran,

did you tried to use any external tool to connect to FTP server using certificate?

regards,

Harish

[Former Member]

No, could you suggest me one please?

[Harish]

you can use Smart FTP, Turbo FTP etc.

regards,

Harish