Skip to Content
0

SAP PI No Keystore entry available for SOAP 7.4 version encryption

Jul 11, 2017 at 04:38 PM

90

avatar image

Hi Experts,

Our scenario : IDOC-> to->SOAP( web service security to encrypt the message)

(Web service security)SOAP->to->IDOC

We have different versions of SOAP in our PI box. SAP Basis 7.11 and 7.4.

Case:1 = not working

When we try to select SOAP channel of 7.4 and enables web service security option,Only "Key store view " is available in sender agreement

Case:2= Working

But Both keystore view and kestore entry available while we used SOAP receiver channel ( SAP basis 7.11)

Why is it so?

Same case in sender agreement for inbound flow ( SOAP to IDOC) when we select SOAP version 7.4 only keystore view is visible ( not decrypting) and for version 7.1 both keystore view and entry available (and its decrypting)

screenshot-1.jpg (119.9 kB)
screenshot-2.jpg (70.3 kB)
10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

2 Answers

Apu Das Jul 12, 2017 at 10:00 AM
0

Hi,

In case of WSS Decrypt, you need to mention the keystore entry of the private key you generally maintain in key store view - WebServiceSecurity.

Thanks,
Apu

Show 1 Share
10 |10000 characters needed characters left characters exceeded

But why there is view option in 7.1 and not in 7.4.

If that is the case then for outbound also only for signing it should have only private key entry but it has both view and entry.

0
Manoj K Jul 12, 2017 at 08:36 AM
0

Murali,

Yes you are right .I just checked in my system for 7.31 and 7.4 adapter and i see for Decrypt option it has only "KeyStore Entry" ideally it should have View and Entry .Firstly i thought it was a metadata issue when i cross checked it dosen't look like that's the issue.

Have you tried testing one ? what is the behaviour ?

Br,

Manoj

Show 1 Share
10 |10000 characters needed characters left characters exceeded

Hi Manoj,

Its not working. i changed to 7.11 and it started working. so as of now, i am using the same.

Thanks

Murali

0