FTPS connection to GXS

[christian_pichler]

Hello!

I am trying to establish a FTPS connection to our VAN GXS using these settings/credentials:

The processing starts and after 20-30 minutes I am getting the following error message:

I am using SAP PI 7.1. Does anyone know how to configure the communication channel properly?

Thank you!

Regards

Christian

[former_member182412]

Hi Christian,

By looking at your server name it is look like SFTP server. You need to configure SFTP adapter if the server is SFTP server.

Regards,

Praveen.

[christian_pichler]

Hi Praveen,

thanks for your reply.

Due to GXS we should use this server for the FTPS traffic. I also tried to connect to it with FileZilla and it worked.

Regards

Christian

[former_member184720]

Couple of things you could try..(just to reiterate, port has to be explicit)

Upload the certificate directly into Trusted CA's view(NWA -> Certificates & Keys -> Key storage -> Trusted CA's)

Also uncheck the check box for x509 for client authentication..

[former_member182412]

Hi Christian,

Check below blogs related to FTPS.

Regards,

Praveen.

[christian_pichler]

Hello Hareesh! Hello Praveen!

Yesterday we were in contact with GXS hotline. They asked us to install CoreFTP Pro and we did the following configuration:

This configuration works but I have absolutely no idea how to put this configuration 1:1 to our PI system (e.g. connection "FTPS (SSL direct)" and server type "GXS").

Do you have an idea how to implement it?

Thank you very much!

Regards

Christian

[former_member182412]

Hi Christian,

PI does not support implicit FTPS i.e specifying port 6366 for the control port in the channel configuration. Use explicit FTPS by specifying the control port as 21.

Refer below sap note for more detail.

1554886 - Implicit FTPS is not supported by the XI/PI FTP Adapter

Cause
Using implicit FTPS (i.e., specifying 990 for the control port in the channel configuration) which is an old standard - not
included in the RFC 4217 specification - that is not supported by the XI/PI FTP Adapter.
Resolution
Use explicit FTPS by specifying the control port as 21

Regards,

Praveen.

[christian_pichler]

Hi Praveen,

Thanks again!

I am not able to decide whether to use implicit or explicit FTPS in the "connection security" option in the CC. We are running on 7.1. Are you able to choose it in your version?

Regards

Christian

[former_member182412]

Hi Christian,

It does not matter whether it is 7.1 or 7.3 you just need to enter the port as 21 in the channel like below, there will be no option for choosing the implicit or explicit because PI does not support implicit FTPS.

The channel configuration in PI 7.31:

Regards,

Praveen.

[christian_pichler]

Hi Praveen,

I changed the port to 21. Now I am receiving the following error message:

We already sent the user/pass information:

Beside this - are you using the X.509 option?

Regards
,

Christian

[former_member182412]

Hi Christian,

• FTP provider configure their FTP server to allow explicit connection
• I am using X.509 Certificate for Client Authentication, Try with uncheck this option
• Make sure that you can be able to login from PI server to FTP server at the operating system level (using command ftp -s ftphost), If you able to successfully connect to FTP sever from operating system level then from PI also it will work.
• Run XPI inspector for more details

Regards,

Praveen.

[former_member184720]

I disagree with this. I can confirm that PI doesn't support implicit FTP but at doesn't mean that port always has to be 21.

It can be anything but it's just that when you setup your FTP account, you get to choose whether to allow implicit/explicit requests.

and AFAIK - ideally implicit mode would always be enabled on port 990, anything other than 990 should be explicit.

So you should configure the port given by your third party.

And as i mentioned in my intial reply, don't check the check box for x509 but just upload the certificates into (NWA -> Certificates & Keys -> Key storage -> Trusted CA's)

Did you try XPI inspector.??

[Former Member]

Hi Christian,

Are you able to connect to GXS van.

I am also trying to connect to GXS van using FTP adapter in SAP PO.

I able to post the files using receiver File channel.

But while pulling the file from SAP sender Adapter we are getting below error.

Could not process due to error: java.long.IllegalStateException: Error during RETR epilogue: com.sap.aii.adapter.file.ftp.FTPEx: 550 Unexpected reply codeRequested action not taken. Extraction command SNRF: 1508210524AZOY. TIP error: GOFILE - invalid service reference (must be an 18-digit number).(0060)

Regards,

Dasrshana

[christian_pichler]

Hi Darshana,

I switched to OFTP push and pull because the FTP adapter did not work well.

Regards

Christian

[vikramanne]

HI Darshana,

Is your issue resolved, we are also getting the same error message when trying to connect to GXS mailbox,please let us know how did you solve your problem.Thank You!!!

[former_member184720]

Were you able to connect to the FTP server with above credentials using filezilla(any other FTP utilities) ?

[christian_pichler]

Hi Hareesh,

thanks for you quick reply!

I used FileZilla (the version with FTPS) and I was able to connect to the the VAN.

It seems that the connection is established but then the connection is resetted.

Regards

Christian

[former_member184720]

And can you confirm if it is an explicit port?

In addition, try configuring the below advanced property to see if it's an issue with hostname validation.

strictHostnameChecking -> false

Just to add - XPI inspector is very useful in such cases. It logs each and every step in the communication and gives much detailed information on the connection error. So you might want to give a try..

[christian_pichler]

Hi Hareesh,

where do you set this property?

Regards

Christian

[former_member184720]

[christian_pichler]

Hi Hareesh,

I set the property but there was no change. Do you also use GXS as VAN provider? They don't allow all FTP commands.

Regards

Christian

[former_member184720]

No.. It's not for GXS and i never connected to it..

I would suggest you to use XPI inspector to get additional traces -

http://scn.sap.com/community/pi-and-soa-middleware/blog/2012/01/12/michals-pi-tips-xpi-inspector--he...