SSL configuration of ABAP & portal error after system refresh.

[Former Member]

Hi Experts,

"Iam struggling with this SSL configuration in ECC abap server(whether should i or not)"

Problem:

let me explain the issue in brief. We are using Portals through internet & are connected to ECC Abap servers respectively  (DEV,QA,PRD).

And now we recently refreshed the PRD system to pre-prod (QA).But unfortunately i didn't take exports of exiting PSE's in ECC (which i thought it was not much necessary after a research).

so i started configuring the SSL in ECC (should i ?) which is refreshed by deleting the existing PSEs.& using the (help.sap.guide)

REF

http://help.sap.com/saphelp_nw70ehp2/helpdata/en/49/23501ebf5a1902e10000000a42189c/frameset.htm

1. 1.setting up parameters
2. 2.create PSEs & create request & sent to CA etc.

• But still iam not able to get the confirmation of SSL configured properly!!
• Neither portal can use or see the logon page of ECC.

I have followed the scn & notes they suggested , please guide me if iam missing something or i didn't follow any thing?

what am i missing? my end result is to view the logon page of ecc in portal but my user face this.

[Former Member]

Hi every one,

I have tried importing the response which i recived from CA.

procedure.

logged in to ecc -->strustsso2--opend the node(sslservernode)--> import response.

then i got this error.

[Former Member]

I Have tried both in

STRUST

STRUSTSSO2

[former_member185239]

Dear Pradeep,

Just follow the thread Problem importing a certificate using Strust | SCN

1468249 - STRUST: Error TRUST057 "CA certificate is missing on database". Import of certificate resp...

Also check the thread

https://scn.sap.com/thread/3788961

With Regards

Ashutosh Chaturvedi

[former_member185239]

Hi Pradeep,

You will get a certificate from CA. Once you receive the certificate , then you need to import it in your server under Standard SSL pse using STRUSTSSO2.

With Regards

Ashutosh Chaturvedi

[Sriram2009]

Hi Pradeep.

Have you tried in different browsers?

Regards

SS

[Former Member]

Hi Sriram

Yes i tried in all browsers .

[isaias_freitas]

Hello,

As mentioned at the message, your browser is not displaying the page because it does not "trust" (it odes not "know") the CA that signed the certificate.

Importing the CA root certificate at the users' browsers should fix the issue.

Regards,

Isaías

[Former Member]

Hi Isaias,

Thanks for your suggestions

i have tried importing the certificate in to browsers which didnt allow . but by ignoring the message (pop up) i was able o see the login page. but we cannot go & install it on every browser & for every user which is not helping my case

there must be something i need to do at server level.

[Former Member]

Hi Pradeep,

Did you import response from CA ?  It looks like certificate does not have valid response yet. You can compare certificate on QA and production to see its correct.

Also check if you have exchanged certificates between ECC and portal

Thanks

SB

[Former Member]

Hi Supriya

Thnaks for your suggestions

I have imported the CA response which was created under SSL Standard PSE

you mention compare certificate on QA & Production to see it is correct (how can i do this)?

i have also exchanged portal certifcate to ecc ( i will retry it ).